CUL-DigitalServices/grasshopper-ui — pull request #77 by Coenego (2014-12-16 11:55:49+00:00)
Title: Sanitise user input before using it in the UI

We'll need to sanitise all user input before using it in the UI.

Underscore can do this by using `<%-` to render output instead of `<%=`. We still need to investigate whether this will catch all cases.