escaping of user provided input (fixes #185)

miguelgrinberg · Dec 20, 2015 · 68efeac · 68efeac
1 parent 7089bc2
commit 68efeac
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/example/templates/index.html b/example/templates/index.html
@@ -15,7 +15,7 @@
             // event handler for server sent data
             // the data is displayed in the "Received" section of the page
             socket.on('my response', function(msg) {
-                $('#log').append('<br>Received #' + msg.count + ': ' + msg.data);
+                $('#log').append('<br>' + $('<div/>').text('Received #' + msg.count + ': ' + msg.data).html());
             });
 
             // event handler for new connections