Well, this is silly: I just discovered that Bandcrash doesn’t properly escape HTML entities in the web preview player. Or rather, it didn’t. It does now, as of v0.7.9.
fluffy 💜