Custom Forms - text field value encoding on submissions view

Topics: Core
May 7, 2014 at 7:58 AM
Edited May 7, 2014 at 4:23 PM
EDIT: Not an issue; my mistake...

When using the Custom Forms module, if a user submits text such as,
into a text field, the value is persisted to database as an encoded value. However, upon viewing the submission via the Custom Forms admin module, the value doesn't appear to be encoded thus displaying the javascript alert window.

For custom forms, should there be some advanced level of validation configured by the admin, developer to further validate the inputs? Regex, whitelist, etc. If so, what approaches have you used native to Orchard?