thetoine/django-filebrowser — comment on commit 17fce34895a0217edc692e2675f10bf17aa7b24c
File:  line 0
By fetzig:

IMHO: escaping the strings would be even better.