@@ -1,9 +1,12 @@

 var github = (function(){

+  function escapeHtml(str) {

+    return $('<div/>').text(str).html();

+  }

   function render(target, repos){

     var i = 0, fragment = '', t = $(target)[0];

     for(i = 0; i < repos.length; i++) {

-      fragment += '<li><a href="'+repos[i].html_url+'">'+repos[i].name+'</a><p>'+(repos[i].description||'')+'</p></li>';

+      fragment += '<li><a href="'+repos[i].html_url+'">'+repos[i].name+'</a><p>'+escapeHtml(repos[i].description||'')+'</p></li>';

     }

     t.innerHTML = fragment;

   }