Fix jashkenas#1677 - Escape title attribute.

whump · Sep 25, 2012 · e7e689a · e7e689a
1 parent c0cdd7e
commit e7e689a
Showing 1 changed file with 6 additions and 6 deletions.
diff --git a/examples/todos/index.html b/examples/todos/index.html
@@ -8,9 +8,9 @@
 </head>
 
 <body>
-  
+
   <div id="todoapp">
-    
+
     <header>
       <h1>Todos</h1>
       <input id="new-todo" type="text" placeholder="What needs to be done?">
@@ -26,13 +26,13 @@ <h1>Todos</h1>
       <a id="clear-completed">Clear completed</a>
       <div id="todo-count"></div>
     </footer>
-    
+
   </div>
-  
+
   <div id="instructions">
     Double-click to edit a todo.
   </div>
-  
+
   <div id="credits">
     Created by
     <br />
@@ -55,7 +55,7 @@ <h1>Todos</h1>
       <label><%- title %></label>
       <a class="destroy"></a>
     </div>
-    <input class="edit" type="text" value="<%= title %>" />
+    <input class="edit" type="text" value="<%- title %>" />
   </script>
 
   <script type="text/template" id="stats-template">