Pita/etherpad-lite — pull request #329 by cweider (2012-01-14 23:10:30+00:00)
Title: Security [HTML Escaping]

Make all HTML escaping methods cover the basic reserved character set and fully escape `href` attributes that include user input.

For now, the four implementations of HTML escape are left standing, I’ll be looking at unifying them as a part of unifying common client and server code soon.