From 65c0e04bb3bb1fd715be12f44f44ad05373754c0 Mon Sep 17 00:00:00 2001
From: Jordan <me@jordan.im>
Date: Sun, 5 Apr 2020 21:08:55 -0700
Subject: ensure HTML-safety of attributes; only-whitespace values treated as
 unpopulated

---
 templates/index.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'templates')

diff --git a/templates/index.html b/templates/index.html
index 7bee424..9bf35db 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -33,8 +33,8 @@
         </tr>
         {% for b, v in books.items() %}
         <tr>
-            <td><a href="?a={{ b }}">{{ v['title'] }}</a></td>
-            <td>{{ v['path'] }}</td>
+            <td><a href="?a={{ b }}">{{ v['title']|escape }}</a></td>
+            <td>{{ v['path']|escape }}</td>
             <td>{{ v['files']|length }}</td>
             <td>{{ v['duration_str'] }}</td>
             <td>{{ v['size_str'] }}</td>
-- 
cgit v1.2.3-54-g00ecf