GS Blog v1.4

[shawn_a]

I'm not quite sure on the security front, but the GS Blog developer does tell users to use it:

Create Excerpt: <?php echo $Blog->create_excerpt(html_entity_decode($post->content), 0, $excerpt_length); ?>
This will create an excerpt of specified length. The $excerpt_length variable would need to be an integer and is the length of the excerpt.

Well yeah because its encoded when saved to xml, so you have to decode it.