title: Is XSS Possible in this case?
body: <p>I'm not really good with security...So just wondering if in the event i was using lightbox 2.6.1 and i had </p>
  
  <p>Edit: Example shows static, but in reality this google.com link comes from a mySQL DB which i have populated with links that goes along with the images (IE when users upload their image they key in a Image Link Source) so the Google.com is replace with that.</p>
  
  <pre><code>&lt;a href="uploads/image.jpg" data-lightbox="example-set" title="&amp;lt;a target='_self' href='http://www.google.com'&amp;gt;Google&amp;lt;/a&amp;gt;"&gt;
  &lt;img src="uploads/image.jpg" alt="" /&gt;
          &lt;/a&gt;
  </code></pre>
  
  <p>Would it be possible to execute a XSS or any form of dangerous javascript? I'm asking because i'm hesitant about this part.</p>
  
  <pre><code>title="&amp;lt;a target='_self' href='http://www.google.com'&amp;gt;Google&amp;lt;/a&amp;gt;"
  </code></pre>