Fix potential XSS issue with arbitrary JS or HTML
Merge pull request #2 from davidjb/master

Fix potential XSS issue with arbitrary JS or HTML