Commit dd92c429 authored by Addy Osmani's avatar Addy Osmani

Merge pull request #424 from passy/marionette-escaping

Marionette: Escape HTML in item titles
parents 339af9f9 3d1484f2
...@@ -31,10 +31,10 @@ ...@@ -31,10 +31,10 @@
<script type="text/html" id="template-todoItemView"> <script type="text/html" id="template-todoItemView">
<div class="view"> <div class="view">
<input class="toggle" type="checkbox" <% if (completed) { %>checked<% } %>> <input class="toggle" type="checkbox" <% if (completed) { %>checked<% } %>>
<label><%= title %></label> <label><%- title %></label>
<button class="destroy"></button> <button class="destroy"></button>
</div> </div>
<input class="edit" value="<%= title %>"> <input class="edit" value="<%- title %>">
</script> </script>
<script type="text/html" id="template-todoListCompositeView"> <script type="text/html" id="template-todoListCompositeView">
<input id="toggle-all" type="checkbox"> <input id="toggle-all" type="checkbox">
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment