No Cross Site Scripting

[mschultheiss]

If you add a entry like [field] = "[[script]]alert('XSS Attack');[[/script]]" to a document, the Javascript is executed. This change should fix the issue. Edit: Replace [[ and ]] with angle brackets, Github removed them from the description.