Extension talk:Progressbar

XSS Vuln
Added a fix to escape $text. Can somebody please review it? ~Rohit

I found another place in your code that could be used for XSS. It came to me by way of the extension I wrote based on your code. You need to escape the "background color" parameter. - Vadtec