yahoo/mojito — pull request #205 by mojit0 (2012-06-14 01:08:59+00:00)
Title: [bz5590319] Unicode and/or HTML escaping for config data.

Can't repair all the variations, but these changes should protect against the reported exploit and one or two others.