fixes #1963, just a little h to fix the xss vuln. test included.
fixes #1963, just a little h to fix the xss vuln. test included.

riseuplabs/crabgrass,geoiq/digitalgazette,ajturner/crisiscommons,geoiq/digitalgazette,geoiq/digitalgazette,geoiq/digitalgazette,ajturner/crisiscommons,riseuplabs/crabgrass,riseuplabs/crabgrass,ajturner/crisiscommons,ajturner/crisiscommons,riseuplabs/crabgrass,riseuplabs/crabgrass,riseuplabs/crabgrass,riseuplabs/crabgrass