Yep. I've tried CDATA too.

It works for most characters, but there are a few that it drops completely for some reason. I don't remember exactly which characters it was dropping, but they were significant. For example, it may have been changing every

target="_blank"

to

target="blank"

This ISN'T what it was doing, but what it did was along the same magnitude. It would drop one important control character that changed the behavior of the code.