On most pages, like these:

https://ci.jenkins-ci.org/job/jenkins_rc_branch/changes
https://ci.jenkins-ci.org/user/kohsuke/

When the username is something like "Joe User <joe.user@example.com>", it is incorrectly escaped in the HTML as:

Joe User <joe.user@example.com>

Then on the changes page for a specific build:

https://ci.jenkins-ci.org/job/jenkins_rc_branch/300/changes

A username like the above wouldn't be escaped at all, so would be "Joe User <joe.user@example.com>" in the HTML.

Of course the proper way to escape this would be:

Joe User <joe.user@example.com>

We are using the mercurial plugin with rhodecode as the mercurial server, and I'm not sure if it's the job of the SCM plugin to escape these or whatever outputs the HTML, though I would think the latter.