graphite-project/graphite-web — pull request #1003 by deniszh (2014-10-23 17:46:08+00:00)
Title: browser, composer: escape target/queryString template variables

See PR #457 for details (esp. comment https://github.com/graphite-project/graphite-web/pull/457#issuecomment-58926028)