diff options
| author | Michael Williamson <mike@zwobble.org> | 2013-12-14 15:06:22 +0000 |
|---|---|---|
| committer | Michael Williamson <mike@zwobble.org> | 2013-12-14 15:06:42 +0000 |
| commit | b1b0fcd0547f1b432baab03038903414a1475a1b (patch) | |
| tree | 4cbd8f88a4e4d10df834f41111c71e578b9516f2 /lib | |
| parent | 2a4c5289179084f3df2c4be43b11c7f03416087e (diff) | |
Escape attribute values
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/html-generator.js | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/html-generator.js b/lib/html-generator.js index 62c58a8..eea0fcf 100644 --- a/lib/html-generator.js +++ b/lib/html-generator.js @@ -88,7 +88,7 @@ function HtmlGenerator() { function generateAttributeString(attributes) { return _.map(attributes, function(value, key) { - return util.format(' %s="%s"', key, value); + return util.format(' %s="%s"', key, escapeHtml(value)); }).join(""); } |