darfire

Try having the text of an option element as something like `<script>alert(11)</script>` (`alert(11)` escaped). When you take $optionText with text() you get the **unescaped** content. When you set it later...