The XAO::Web module prior to 1.84 for Perl mishandles < and > characters in JSON output during use of json-embed in Web::Action.