planetcyborg/np — pull request #1 by jplitza (2014-01-19 10:25:53+00:00)
Title: Use textContent and innerText instead of innerHTML

Closes XSS vulnerability

Regrettably, IE <=8 doesn't support textContent, so I included a fallback to innerText (which isn't supported by modern browsers in turn)