ato/clojars-web — pull request #93 by xeqi (2012-09-10 18:58:19+00:00)
Title: Patch hiccup to escape strings by default

Rather then assume safe by default, change hiccup to use escape by default.

This extends a protocol in hiccup, and might be view as similiar
to monkey patching.

----

I notice a couple of spots vulnerable to XSS so I'd like to get thoughts on this. I'd prefer this monkey patching type escape by default over exposing an XSS from forgetting to `(h ..)` something.