wikimedia/WLMMobile — pull request #217 by brion (2012-08-30 13:44:43+00:00)
Title: Bug 39735: use HTML escaping in HTML templates

Uses <%- ... %> syntax for escaping in HTML templates instead of <%= ... %> which interpolates raw HTML. Prevents HTML injection from monument titles, addresses etc accidentally still including HTML tags.