Merge pull request #1208 from joker-x/fix1203

Fix #1203: non-escaped html in plugins info

src/templates/admin/plugins-info.html

@@ -14,17 +14,17 @@
       <div class="separator"></div>
 
       <h2>Installed plugins</h2>
-      <pre><%= plugins.formatPlugins() %></pre>
+      <pre><%- plugins.formatPlugins().replace(", ","\n") %></pre>
 
       <h2>Installed parts</h2>
       <pre><%= plugins.formatParts() %></pre>
 
       <h2>Installed hooks</h2>
       <h3>Server side hooks</h3>
-      <div><%= plugins.formatHooks() %></div>
+      <div><%- plugins.formatHooks() %></div>
 
       <h3>Client side hooks</h3>
-      <div><%= plugins.formatHooks("client_hooks") %></div>
+      <div><%- plugins.formatHooks("client_hooks") %></div>
     </div>
   </body>
 </html>