escape event data

src/events.js

@@ -1,13 +1,13 @@
 
 'use strict';
 
-var async = require('async'),
-
-	db =  require('./database'),
-	batch = require('./batch'),
-	user = require('./user'),
-	utils = require('../public/src/utils');
-
+var async = require('async');
+var validator = require('validator');
+	
+var db =  require('./database');
+var batch = require('./batch');
+var user = require('./user');
+var utils = require('../public/src/utils');
 
 (function(events) {
 	events.log = function(data, callback) {
@@ -54,6 +54,11 @@ var async = require('async'),
 			},
 			function(eventsData, next) {
 				eventsData.forEach(function(event) {
+					Object.keys(event).forEach(function(key) {
+						if (typeof event[key] === 'string') {
+							event[key] = validator.escape(String(event[key] || ''));	
+						}						
+					});
 					var e = utils.merge(event);
 					e.eid = e.uid = e.type = e.ip = e.user = undefined;
 					event.jsonString = JSON.stringify(e, null, 4);