* fix(xss): build textWidth span via .text() and load example iframe over https
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
* fix(xss): build DOM-sourced UI elements safely instead of via html string interpolation
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>
---------
Signed-off-by: Thomas Vincent <thomasvincent@gmail.com>