fixed XSS exploit in embed code
Merge pull request #4 from asiekierka/master

Fix an exploit in embed letting you inject HTML code