Hello, I just looked at strange behaviour after an user used the char "&" (ampersend) into a text_field of his profile. The char was trasformed into html_entity:

& amp;amp; (without that space)

Into the database it look as & amp; (without that space) then when shown on site it looks like above.

I've done a test in my Joomlapolis profile and ampersend looks wrong also there (look at my profile > Personal Info > Other Languages). The field was filled with
"just a test of & (ampersend) and à è é ì ò ù < >"
and instead it shows
"just a test of &a mp; (ampersend) and à è é ì ò ù &lt; &gt;"

This problem affects just text_fields because on text_area the html entities are correctly coded.