crucialfelix/django-ajax-selects — pull request #45 by elijahr (2013-04-13 23:36:12+00:00)
Title: Escape format_match and format_item_display

This fixes an XSS vulnerability.