kombai/freewall — pull request #28 by STRML (2014-01-09 01:55:55+00:00)
Title: Fix XSS vulnerability.

Technically, if freewall is used on a page where users can contribute content, especially HTML, if a user knows the site is running freewall he/she can insert any arbitrary javascript in the following way:

```html

```

This can easily be fixed by using `$.fn.data()`, which is available in both jQuery and Zepto. It converts "true", "false", and "null" to the correct types, and numbers to the Number type, allowing the conditional on L76 to work.

See [$.fn#data](http://zeptojs.com/#data).