Values become HTML-encoded

[Jaaap]

When i initialize a VirtualSelect with these options:

{
	"name": "myVirtualSelect",
	"showValueAsTags": false,
	"selectAllOnlyVisible": true,
	"setValueAsArray": true,
	"enableSecureText": true,
	"multiple": true,
	"emptyValue": "[]",
	"placeholder": "-None-",
	"allOptionsSelectedText": "All",
	"searchPlaceholderText": "Search…",
	"options": [
		{
			"value": "<",
			"label": "Value with unsafe char <"
		},
		{
			"value": "something",
			"label": "Something"
		}
	],
	"selectedValue": [
		"<"
	],
	"disabledOptions": []
}

and i select the Value with unsafe char <, the hidden input's value becomes ["<"] but that should be ["<"].

[gnbm]

Given you're using "enableSecureText": true, that looks to be working as expected since it will avoid XSS vulnerabilities

[Jaaap]

That makes the value being sent to the server also Html Encoded which is not the way it should be (should only be application/x-www-form-urlencoded or multipart/form-data encoded, which is done by the browser on submit)