Commit dd92c429 authored by Addy Osmani's avatar Addy Osmani

Merge pull request #424 from passy/marionette-escaping

Marionette: Escape HTML in item titles
parents 339af9f9 3d1484f2
......@@ -31,10 +31,10 @@
<script type="text/html" id="template-todoItemView">
<div class="view">
<input class="toggle" type="checkbox" <% if (completed) { %>checked<% } %>>
<label><%= title %></label>
<label><%- title %></label>
<button class="destroy"></button>
</div>
<input class="edit" value="<%= title %>">
<input class="edit" value="<%- title %>">
</script>
<script type="text/html" id="template-todoListCompositeView">
<input id="toggle-all" type="checkbox">
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment