Fix #308 by passing clipboard content through self.htmlEntities before inserting
added tests for onerror exploit with disableReturn false and disableReturn true
whitespace fix
Merge pull request #309 from pascalpp/disableReturn_exploit

Fix #308 by passing clipboard content through self.htmlEntities