aehlke/tag-it — Issue #48: Unescape escaped input
Author: mcrider
Created: 2011-11-28 21:38:28+00:00
State: open

If for whatever reason tag-it gets its existing values as escaped strings-- which I must escape because they can come from a source other than tag-it and could contain quotes or html tags -- the createTag function should unescape these strings so they display correctly.

I've done this by adding ```value = $('

').html(s).text();``` to the top of the createTag function.

I don't think tag-it should be relying completely on the createTag function to create safe values, as those values can be modified by the user (e.g. with firebug) or could be modified elsewhere in the system (at least in my case).