It seems that OpenFire does not escape special characters such as quotes when sending presence updates to clients. If I change for example my status message in Spark to I’m Available “”, the two quotes are escaped by Spark when sent to server (ie. using ")
However, when the server sends the updates to other clients, the XML contains the quotes unescaped.
According to some, that is in violation of RFC 3920.