xaneem/Treasure-Hunt — pull request #1 by vishalvijay (2014-03-04 19:22:06+00:00)
Title: Fix for XSS attack vulnerability

I found some XSS attack vulnerability in this project.
College name, phone number and email are provided by user, so we should escape it while rendering. If we didn't escape user given data, they can enter javascript as input to the form.
For example : \

Same way they can do session hijacking here. So its a major vulnerability.