Mardak/profile — pull request #77 by emtwo (2014-03-28 20:34:41+00:00)
Title: Use escapeHTML() instead of sanitize() for attributes.

@oyiptong @Mardak anything missing in this one?