MatthewMueller/cheerio — pull request #72 by benatkin (2012-07-08 04:34:33+00:00)
Title: Patch xss vulnerabilities

I added a couple more tests to make sure #71's escaped text makes it into the html.

Please merge and publish this. You may want to make it 0.9.0 if you're concerned that people have let the bug into their own code. They probably have, so I would recommend it. But this bug aside, it passes the tests and so it should be ready to release.

It does essentially, if not completely, the same thing as it would if it escaped it on the way out. It might be more elegant to escape it on the way out, but this does the job and is an important fix IMO.