xslate/p5-Text-Xslate — pull request #110 by tokuhirom (2014-04-15 05:18:50+00:00)
Title: Escape braces by default.

Xslate doesn't escape braces by current implementation.
AngularJS thinks braces are special chars.
In edge case, Xslate+AngularJS makes XSS.

This patch makes xslate, escape braces by default.

https://github.com/angular/angular.js/issues/5601