Ember CVE-2015-7565

application.controller.js

import Ember from 'ember';

export default Ember.Controller.extend({
  appName: {
    level1: {
      string: "<b style='color: red;'>Emberjs</b>"
    }
  }
});

application.template.hbs

<h1>Welcome to {{appName.level1}}</h1>
<br>
<br>
{{outlet}}
<br>
<br>

twiddle.json

{
  "version": "0.5.0",
  "EmberENV": {
    "FEATURES": {}
  },
  "options": {
    "enable-testing": false
  },
  "dependencies": {
    "jquery": "https://cdnjs.cloudflare.com/ajax/libs/jquery/1.11.3/jquery.js",
    "ember": "1.12.1",
    "ember-data": "https://cdnjs.cloudflare.com/ajax/libs/ember-data.js/2.2.0/ember-data.js",
    "ember-template-compiler": "1.12.1"
  }
}