escape output

src/controllers/admin.js

@@ -195,7 +195,7 @@ adminController.logs.get = function(req, res, next) {
 		}
 
 		res.render('admin/advanced/logs', {
-			data: data.toString()
+			data: validator.escape(data.toString())
 		});
 	});
 };

src/views/admin/advanced/logs.tpl

@@ -3,7 +3,7 @@
 		<div class="panel panel-default">
 			<div class="panel-heading"><i class="fa fa-file-text-o"></i> Logs</div>
 			<div class="panel-body">
-				<pre><code>{data}</code></pre>
+				<pre>{data}</pre>
 			</div>
 		</div>
 	</div>