STENCIL-3312: Properly escape html in product list view

Author: Alyss Noland

CHANGELOG.md

@@ -3,6 +3,7 @@
 ## Draft
 - `stencil.conf.js` was refactored to support webpack2 builds [961](https://github.com/bigcommerce/cornerstone/pull/961)
 - Load amp social share JS only when we have share icons enabled. [#968](https://github.com/bigcommerce/cornerstone/pull/968)
+- Escape html for product summaries in product list view
 
 ## 1.6.2 (2017-03-15)
 - Fix a bug that was not updating price and weight when an option is selected [#963](https://github.com/bigcommerce/cornerstone/pull/963)

templates/components/products/list-item.html

@@ -15,7 +15,7 @@ <h4 class="listItem-title">
                     <a href="{{url}}">{{name}}</a>
                 </h4>
                 {{#if summary}}
-                    <p>{{summary}}</p>
+                    <p>{{{summary}}}</p>
                 {{/if}}
             </div>
             <div class="listItem-actions">