From bbd34c7e7ca2796c4b4d36d1cf5de9ea20c4987d Mon Sep 17 00:00:00 2001
From: Marcin Kulik <marcin.kulik@gmail.com>
Date: Mon, 13 Feb 2012 22:20:29 +0100
Subject: [PATCH] Escape & and < in span before inserting them into DOM

---
 app/assets/javascripts/player/terminal_view.js.coffee | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/app/assets/javascripts/player/terminal_view.js.coffee b/app/assets/javascripts/player/terminal_view.js.coffee
index d03cbe6..69e7599 100644
--- a/app/assets/javascripts/player/terminal_view.js.coffee
+++ b/app/assets/javascripts/player/terminal_view.js.coffee
@@ -46,6 +46,8 @@ class AsciiIo.TerminalView extends Backbone.View
       if d
         [char, brush] = d
 
+        char = char.replace('&', '&amp;').replace('<', '&lt;')
+
         if brush != prevBrush or i is cursorX or i is (cursorX + 1)
           if prevBrush
             html += '</span>'