viralpickaxe/pollr — pull request #1 by Heavenstar (2014-08-17 14:17:58+00:00)
Title: Preventing XSS injections on output for poll name by escaping html chars

Using $.text instead of $.html is escaping html characters from the inserted value