cowboy/jquery-replacetext — pull request #5 by WalrusCow (2013-11-13 22:12:48+00:00)
Title: Escape HTML from nodeValue

Tip: add `?w=0` to the diff to ignore whitespace (I removed trailing whitespace).

Added new functions to escape/unescape HTML entities `&`, `"`, `'`, `<`, `>`.

Page with example of previous behaviour (put in base directory to run).
```html

Hello World

Hello <script>alert('hi');</script> World

```

Notice that with the original code, an alert is received, and the `` text disappears. With the new code, it remains, and no alert is received.

I'm no jQuery hacker or anything, but some code I'm working on was using this library and I finally traced the bug down to this plugin. We're using [underscore](http://underscorejs.org/) so this was a much more minor change when I made it for us. Thought I'd push it back to you in case you want it.