silverorange/Promo — pull request #24 by nburka (2014-11-18 16:08:22+00:00)
Title: Escape entitites for the discount message

We're appending XHTML right below, but not escaping the message text above.