HubSpot/youmightnotneedjquery — pull request #21 by fhemberger (2014-01-31 05:49:19+00:00)
Title: Security: Mitigate DOM XSS vulnerability

Your version of the script is prone to DOM XSS attacks:
`parseHTML('')` will execute the script immediately. This altered version prevents the execution of the script.

`$.parseHTML('')` is still vulnerable to this attack, so generally it's not recommended to parse arbitrary HTML on the client side.