I don't believe you're "supposed" to have entries with quotes in the title, but you can, and I've submitted them. This issue fixes a bug where unescaped entries with said quotes break the input field when modifying an entry.
THERE IS NO TESTING DONE!
I don't know how or where to test OCS stuff, or how to set up a local OCS test server. This commit is small enough that it won't burn down the system, but I'd really, really like to have a testing area before more in-depth work.
If there is some OCS-based alternative to htmlspecialchars it would be applicable here instead of my solution, I don't know the moving parts available.
If this fix is good and acceptable I'll go through and prep more.