From a5270fe5640552646b52b5cc58c906660715c8b1 Mon Sep 17 00:00:00 2001
From: DarwinSenior <DarwinSenior@hotmail.com>
Date: Thu, 6 Aug 2015 18:32:35 -0500
Subject: [PATCH] Adding the escape for html encoding

I am currently want to include "<>" inside the display, so I have to substitute "<" and ">" with '&gt;' and '&quot;'
---
 src/L.Control.MousePosition.js | 13 ++++++++++---
 1 file changed, 10 insertions(+), 3 deletions(-)

diff --git a/src/L.Control.MousePosition.js b/src/L.Control.MousePosition.js
index 656bc78..543ae68 100644
--- a/src/L.Control.MousePosition.js
+++ b/src/L.Control.MousePosition.js
@@ -27,9 +27,16 @@ L.Control.MousePosition = L.Control.extend({
     var lat = this.options.latFormatter ? this.options.latFormatter(e.latlng.lat) : L.Util.formatNum(e.latlng.lat, this.options.numDigits);
     var value = this.options.lngFirst ? lng + this.options.separator + lat : lat + this.options.separator + lng;
     var prefixAndValue = this.options.prefix + ' ' + value;
-    this._container.innerHTML = prefixAndValue;
-  }
-
+    this._container.innerHTML = this._encode(prefixAndValue);
+  },
+  _encode: function (str) {                                                                                    
+      return String(str)                                                                                          35         .replace(/&/g, '&amp;')                                                                                
+          .replace(/</g, '&lt;')                                                                                 
+          .replace(/>/g, '&gt;')                                                                                 
+          .replace(/"/g, '&quot;')
+          .replace(/&/g, "&amp;")
+          .replace(/"/g, "&quot;");                                                                              
+    },
 });
 
 L.Map.mergeOptions({