Just noticed by accident that on the "Recent Threads" page in the "approved by" links' titles, the substring "target" is being replaced by " ", e.g.

<a href="?node_id=520366" target title="Approved by  smart">A</a>
                                                    ^
[download]

in a node approved by targetsmart (as for example the recent 764194).

Certainly not the most important thing in the world... just wondering if that's some curious security feature (or side effect thereof), or simply a bug.

Update: actually, looking more closely, it seems to become a bogus target attribute (without value) of the <a ...> tag.

So now I wonder whether this is maybe more of a security issue than a security feature...  but I won't create a user target=""onmouseover="javascript:..."smart (and wait until that user is allowed to approve) just in order to try :)

(where ... is some evil javascript that posts your credentials to a site of mine, or some such)