[TASK] Prevent XSS in tooltip

lib/map/labellayer.js

@@ -87,7 +87,7 @@ define(['leaflet', 'rbush', 'helper', 'moment'],
         m.on('click', function () {
           router.fullUrl({ node: d.node_id });
         });
-        m.bindTooltip(d.hostname);
+        m.bindTooltip(helper.escape(d.hostname));
 
         dict[d.node_id] = m;
 
@@ -114,7 +114,7 @@ define(['leaflet', 'rbush', 'helper', 'moment'],
           line.setStyle(opts);
         };
 
-        line.bindTooltip(d.source.hostname + ' – ' + d.target.hostname +
+        line.bindTooltip(helper.escape(d.source.hostname + ' – ' + d.target.hostname) +
           '<br><strong>' + helper.showDistance(d) + ' / ' + helper.showTq(d.source_tq) + ' - ' + helper.showTq(d.target_tq) + '<br>' + d.type + '</strong>');
 
         line.on('click', function () {

lib/utils/helper.js

@@ -196,5 +196,11 @@ define({
         btn.classList.add('ion-full-enter');
       }
     }
+  },
+  escape: function escape(string) {
+    return string.replace(/</g, '&lt;')
+      .replace(/>/g, '&gt;')
+      .replace(/"/g, '&#34;')
+      .replace(/'/g, '&#39;');
   }
 });