Group helper does not escape content included in it


#1

Hey guys,

I noticed an issue with group helper that it does not escape content in it properly. So if you have:

{{#group}}
  {{#each model groupedRows=true}}
    {{name}}
  {{/each}}
{{/group}}

And name contains script tags, it wont be escaped properly … Anyone noticed this issue? Any fix? This raises a red flag with perf as we are relying on group helper to boost perf at some places. Thanks!