html script code execution on the latest versions of Brackets with no file extension.

[stypr]

If there's no extension on the file and html script code is inserted, the script gets executed without any filters.

I'm currently using latest edition of Brackets versions, with latest version of the minimap plugin.

the way to trigger the problem is as follows:

1. create a filename with no extension (example, 'testtest')
2. insert the html script tag with appropriate javascript codes. (example, '<script>alert('xss');</script>')
3. open the file in brackets.

this bug might lead to security problems (precisely XSS/CSRF problems).

[stypr]

This happened on the brackets-minimap package.

I just Created a new issue on the brackets-minimap package issue tab too.

Maybe Brackets also needs to add a filter that blocks illegal things that could trigger from the plugin.

zorgzerg/brackets-minimap#33