Code sample in the manual leads to cross-site-scripting vulnerability

[tonylampada]

I used the example below on FreedomSponsors (Have you seen it already? it's pretty cool! hehe), and I found a cross-site-scripting vulnerability on it.

http://misaka.61924.nl/manual/#toc_15

When I add a code block by indentation, like the one below, it will actually execute the javascript code instead of displaying it on screen.

<script>
alert(document);
</script>

This is how I fixed it in FS. Please consider updating the documentation to use that strategy (or maybe something better) instead of the current one.

[FSX]

Thanks, good catch! Will look at it when I get home.

[tonylampada]

No, thank you man. This Misaka thing just rocks :-)