flamejs / flame.js

Flame.js is a widget/UI library for Ember.js
MIT License
373 stars 39 forks source link

XSS fixes #209

Closed kheldysh closed 9 years ago

kheldysh commented 9 years ago

-Patch render calls in CheckboxView, TableView and TableDataView to display escaped content; preserve
tags in table headers in TableView -Escape the innerHTML call in string_measurement.js -Escape element.html call when selecting read-only content in TableDataView