Details
Description
For some reason the Create Customer Request form (component://order/widget/ordermgr/CustRequestForms.xml) doesn't encode the output of the "story" field. This breaks the screen when certain html or freemarker special characters are entered into the field.
I don't see any good reason why this field in particular shouldn't be using encoding so I'm going to enable it again.