From 2ffc1ff0367feac101a0ad8c4ffb41f04fbe98a2 Mon Sep 17 00:00:00 2001
From: Lukas Reschke <lukas@statuscode.ch>
Date: Tue, 23 Apr 2013 00:51:33 +0300
Subject: [PATCH] Escape HTML

---
 templates/js_tpl.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/js_tpl.php b/templates/js_tpl.php
index 3d3f22c6..67b41e24 100644
--- a/templates/js_tpl.php
+++ b/templates/js_tpl.php
@@ -33,7 +33,7 @@
 				</p>
 				<div class="bookmark_form_tags"><ul>
 					<& for ( var i = 0; i < tags.length; i++ ) { &>
-						<li><&=tags[i]&></li>
+						<li><&= escapeHTML(tags[i]) &></li>
 					<& } &>
 				</ul></div>
 				<p class="bookmark_form_desc">