<p>would rendering all instances of <code>javascript:</code> to <code>javascript%3A</code> and <code>data:</code> to <code>data%3A</code> be a good solution to this?</p>

<p style="font-size:small;-webkit-text-size-adjust:none;color:#666;">—<br>Reply to this email directly or <a href='https://github.com/opentechinstitute/luci-commotion-apps/issues/12#issuecomment-26271979'>view it on GitHub</a>.<img src='https://github.com/notifications/beacon/HSS0tS4nfORw_XnPQF8f0aN3i5bXfhozh_5bDAr3Nkjt8P-rPFYD0S_1YZ1oaUjQ.gif' height='1' width='1'></p>