powmedia/backbone-forms — pull request #170 by denis-tuzhik (2013-01-14 09:09:22+00:00)
Title: XSS vulnerabilities in form templates, and raw html generating in editors.

##### During some tests found XSS vulnerabilites while inserting some data in model.

They were found in templates ( /scr/templates/ ) and raw html generation ( /src/editors.js ).
Added more complex regexes to match mustache templates exactly in the first case, and escaped data coming from model in second.

Now in templates:
* __{{{__ Some text __}}}__ - match text without escaping it
* __{{__ Some text __}}__ - match text while escaping it ( default mustache behavior )