PaleoIngredientCheck: encoding the input string for XSS protection (we think this is still neded)

2016-05-18 12:40:39 +01:00 · 2016-05-18 12:40:39 +01:00 · a913c6af02
parent 463027d896
commit a913c6af02
1 changed files with 1 additions and 1 deletions
--- a/lib/DDG/Goodie/PaleoIngredientCheck.pm
+++ b/lib/DDG/Goodie/PaleoIngredientCheck.pm
@ -41,7 +41,7 @@ handle remainder => sub {
    return $result, structured_answer => {
        data => {
            title => $result,
-            subtitle => "Paleo Friendly: $item"
+            subtitle => "Paleo Friendly: ".html_enc($item)
        },
        templates => {
            group => 'text'