No HTML string can start with "#", avoids XSS. Close gh-36.
Add jQuery 2.0 to Swarmy unit tests.
Use jQuery project standards for JSHint options.
Break out XSS tests and add more.
Tagging the 1.2.0 release.
Updating the source version to 1.2.1-pre
Fix the XSS fix, see #38, #39, #40.