jmendeth/visural-common — comment on commit 9d786612d4cde4401789c31caceb22ac36ff2071
File: visural-common/src/com/visural/common/web/lesscss/LessCSS.java line 62
By jmendeth:

**Important:** this was vulnerable to a **JavaScript injection**, because it wasn't escaping `\`. So for example:
`\"` in the input becomes `\\"` in javascript.
Besides, we can call the function directly from Java (see below).