mmonteleone/jquery.flextarea — Issue #1: Script tags execute
Author: diosloco
Created: 2011-10-24 18:12:42+00:00
State: open

Repro:

1. Create a textarea with flextarea and paste the following: ""

ACTUAL:
The script executes

EXPECTED:
It is text, so it should not execute, much like a textarea without flextarea.

Locally, I tried changing line 149 from "text = textarea.val()" to "text = escape(textarea.val())", but then Chrome doesn't resize properly.

I am now using

text = textarea.val()
.replace("", "</script>"),

and it seems to be working OK. Not very elegant, but it seems to do its job.