Add HTML escaping to templating in src.template.js

This commit is contained in:
chylex 2016-10-26 13:01:10 +02:00
parent 062abeb86a
commit 218c28f30e

View File

@ -10,9 +10,9 @@ TEMPLATE.prototype.apply = function(obj, processor){
if (processor){
var updated = processor(match, value);
return typeof updated === "undefined" ? value : updated;
return typeof updated === "undefined" ? DOM.escapeHTML(value) : updated;
}
return value;
return DOM.escapeHTML(value);
});
};