mattmiller/dygraphs — comment on commit 3bdf7140262d10722fbf9e596c80f9ba247d5e52
File:  line 0
By kberg:

I would recommend that you use style sheets instead. See on the line above how the entry defines the div's className? It's possible for labels to come from untrusted sources with labels such as .