diff --git a/docs/images/tzigla.png b/docs/images/tzigla.png new file mode 100644 index 00000000..e5c1939f Binary files /dev/null and b/docs/images/tzigla.png differ diff --git a/index.html b/index.html index 851723d5..067b2900 100644 --- a/index.html +++ b/index.html @@ -137,9 +137,9 @@ border: 4px solid #bbb; border-top: 0; border-bottom: 0; margin: 0px 0 30px; } - img.example_image { - margin: 0px auto 30px; - } + img.example_image { + margin: 0px auto 30px; + } @@ -546,6 +546,22 @@ new Book({ note.get("title")

+

+ escapemodel.escape(attribute) +
+ Similar to get, but returns the HTML-escaped version + of a model's attribute. If you're interpolating data from the model into + HTML, using escape to retrieve attributes will prevent + XSS attacks. +

+ +
+var hacker = new Backbone.Model({
+  name: "<script>alert('xss')</script>"
+});
+
+alert(hacker.escape('name'));
+

setmodel.set(attributes, [options]) @@ -1893,7 +1909,30 @@ var DocumentView = Backbone.View.extend({ Backbone Mobile - + +

+ Cristi Balan and + Irina Dumitrascu created + Tzigla, a collaborative drawing + application where artists make tiles that connect to each other to + create surreal drawings. + Backbone models help organize the code, controllers provide + bookmarkable deep links, + and the views are rendered with + haml.js and + Zepto. + Tzigla is written in Ruby (Rails) on the backend, and + CoffeeScript on the frontend, with + Jammit + prepackaging the static assets. +

+ +
+ + Tzigla + +
+

James Yu used Backbone.js to create QuietWrite, an app @@ -1901,7 +1940,7 @@ var DocumentView = Backbone.View.extend({ It also works great on the iPad. The editor relies on Backbone to persist document data to the server.

- +
QuietWrite