bug(locators): escape query in byExactBinding

See http://stackoverflow.com/q/3561711

Closes #1918

Author: sjelin

lib/clientsidescripts.js

@@ -72,7 +72,10 @@ functions.findBindings = function(binding, exactMatch, using, rootSelector) {
     if (dataBinding) {
       var bindingName = dataBinding.exp || dataBinding[0].exp || dataBinding;
       if (exactMatch) {
-        var matcher = new RegExp('({|\\s|^|\\|)' + binding + '(}|\\s|$|\\|)');
+        var matcher = new RegExp('({|\\s|^|\\|)' +
+            /* See http://stackoverflow.com/q/3561711 */
+            binding.replace(/[\-\[\]\/\{\}\(\)\*\+\?\.\\\^\$\|]/g, "\\$&") +
+            '(}|\\s|$|\\|)');
         if (matcher.test(bindingName)) {
           matches.push(bindings[i]);
         }

website/docgen/inline_tags/code.js

@@ -1,8 +1,20 @@
+var htmlSpecialCharMap = {
+  "&": "&",
+  "<": "&lt;",
+  ">": "&gt;",
+  '"': '&quot;',
+  "'": '&#39;',
+  "/": '&#x2F;'
+};
+
 module.exports = function codeTagDef() {
   return {
     name: 'code',
     handler: function(doc, tag, content) {
-      return '<code ng-non-bindable>' + content + '</code>';
+      return '<code ng-non-bindable>' +
+          content.replace(/[&<>"'\/]/g, function (s) { 
+            return htmlSpecialCharMap[s];
+          }) + '</code>';
     },
     description: 'Handle inline code tags',
     aliases: ['monospace']