One-com/shinybox — pull request #7 by mwoc (2013-11-08 15:39:40+00:00)
Title: Use .text instead of .append in setTitle, to prevent rendering title as html

We don't want someone to inject script tags via the title :)