buddycloud/webclient — pull request #123 by highfellow (2012-12-17 03:54:56+00:00)
Title: Escaped strings inside tags

This is a quick fix to a bug reported by nylz@buddycloud.org on report_bugs@topics.buddycloud.org. Embedded html in posts wasn't escaped. I've also had a look through the rest of the templates, and escaped a few other strings that seemed relevant.

I haven't escaped strings in html attributes, because I wasn't sure of the best way to do this.