express-expose escape </script> in strings

escape </script> in strings

Open takempf opened this issue 12 years ago • 4 comments

If we don't keep the browser from misbehaving, this happens: Screen Shot 2013-03-21 at 5 51 46 PM ...and we can't have that happen.

More on this issue here: http://stackoverflow.com/questions/8749001/escaping-html-entities-in-javascript-string-literals-within-the-script-block

Mar 22 '13 00:03 takempf

@visionmedia Sorry to bother, but it's been a couple months now. Does this pull request make sense?

May 22 '13 00:05 takempf

@visionmedia are you no longer accepting pull reqs for this module?

Aug 30 '13 06:08 takempf

:+1:

Dec 11 '14 03:12 freewil

Doesn't this also require key to be run through string on line 162?

Apr 16 '15 01:04 stuartpb