seejohnrun/haste-server — pull request #15 by zaeleus (2012-01-09 05:49:59+00:00)
Title: Escape document when using the txt extension

The `txt` extension allows for raw html since highlight.js doesn't process it. For example,

[http://hastebin.com/rakuwapata.txt](http://hastebin.com/rakuwapata.txt)
[http://hastebin.com/raw/rakuwapata.txt](http://hastebin.com/raw/rakuwapata.txt)

The text should be escaped to prevent the rendering of unsafe content.