This repository was archived by the owner on Sep 24, 2018. It is now read-only.
This repository was archived by the owner on Sep 24, 2018. It is now read-only.
Profiler labels don't escape HTML #28
Description
From source, labels are set with:
<td class="profiler-label"><%= $value.name %></td>
I can't tell if this is meant as a "feature" or whether it's an unintentional bug.
If it's a bug I assume it should be something along the lines of:
<td class="profiler-label"><%= MiniProfiler.safeHtml($value.name) %></td>