From fa9077f6f1e158c2b92b8e8b16c138e48368f5e6 Mon Sep 17 00:00:00 2001 From: Chasen Le Hara Date: Mon, 5 Jun 2017 18:23:11 -0700 Subject: [PATCH] Escape the description This prevents html elements that should show up as code from being inserted into the DOM. --- static/templates/search-results.stache | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/static/templates/search-results.stache b/static/templates/search-results.stache index 72f738d4..141c8343 100644 --- a/static/templates/search-results.stache +++ b/static/templates/search-results.stache @@ -23,12 +23,12 @@ {{#if result.title}} ({{result.name}}) - + {{/if}} {{#if result.description}}
- {{{result.description}}} + {{result.description}}
{{/if}}