chriso/node-validator — pull request #202 by calzoneman (2013-07-06 15:07:15+00:00)
Title: Only match evil HTML attributes on word boundaries

Prevents words containing (but not starting with) 'on' from being XSS filtered (see #201).