Skip to content

Commit

Permalink
Merge pull request #1080 from dvoytenko/mustache_patch1
Browse files Browse the repository at this point in the history
Sync with upstream 378bcca8a5cfe4058f294a3dbb78e8755e8e0da5 that implements HTML escaping fix
  • Loading branch information
dvoytenko committed Dec 4, 2015
2 parents 2cce83d + aea8cb4 commit bc42848
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions third_party/mustache/mustache.js
Original file line number Diff line number Diff line change
Expand Up @@ -63,11 +63,13 @@
'>': '>',
'"': '"',
"'": ''',
'/': '/'
'/': '/',
'`': '`',
'=': '='
};

function escapeHtml (string) {
return String(string).replace(/[&<>"'\/]/g, function fromEntityMap (s) {
return String(string).replace(/[&<>"'`=\/]/g, function fromEntityMap (s) {
return entityMap[s];
});
}
Expand Down

0 comments on commit bc42848

Please sign in to comment.