added sanitize and linkify functions. Moved some js to lib/

app/assets/javascripts/main.js.coffee

@@ -32,6 +32,14 @@ window.disableButtonIfEmptyField = (field_selector, button_selector) ->
     else
       closest_submit.enable()
 
+window.sanitize = (str) ->
+  return str.replace(/<(?:.|\n)*?>/gm, '')
+
+window.linkify = (str) ->
+  exp = /(\b(https?|ftp|file):\/\/[-A-Z0-9+&@#\/%?=~_|!:,.;]*[-A-Z0-9+&@#\/%=~_|])/ig
+  return str.replace(exp,"<a href='$1'>$1</a>")
+
+
 $ ->
   # Click a .one_click_select field, select the contents
   $(".one_click_select").on 'click', -> $(@).select()

app/assets/javascripts/wall.js.coffee

@@ -70,7 +70,7 @@
   
   renderNote: (note) ->
     author = '<strong class="wall-author">' + note.author.name + '</strong>'
-    body = '<span class="wall-text">' + note.body + '</span>'
+    body = '<span class="wall-text">' + linkify(sanitize(note.body)) + '</span>'
     file = ''
     time = '<abbr class="timeago" title="' + note.created_at + '">' + note.created_at + '</time>'
 
@@ -80,4 +80,3 @@
     html = '<li>' + author + body + file + time + '</li>'
 
     $('ul.notes').append(html)
-