radare/radare2 — pull request #1359 by atalax (2014-09-15 17:53:59+00:00)
Title: www: Escape HTML entities in the List Elements menu

This commit adds HTML escaping to strings displayed in rightmenu.js.
Previously, malicious binary could incorporate Javascript code in one of its
strings and attack the web interface.