From 27a98f32de4ff4972ca08b046c0ff3df3f10fdd5 Mon Sep 17 00:00:00 2001
From: alyx <alyx@aleteoryx.me>
Date: Sat, 1 Jun 2024 11:28:26 -0400
Subject: escape meta tags

---
 visitors.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'visitors.php')
diff --git a/visitors.php b/visitors.php
index c908ed4..a841d3a 100644
--- a/visitors.php
+++ b/visitors.php
@@ -621,10 +621,10 @@ function render_form() {
 <html>
 <head>
   <meta charset='utf-8' />
-  <meta name=description content="<?= @$config['blurb'] ?>" />
-  <meta name='og:name' content="<?= $config['title'] ?>">
-  <meta name='og:description' content="<?= @$config['blurb'] ?>">
-  <meta name='og:site_name' content="<?= @$config['site_name'] ?>">
+  <meta name=description content="<?= htmlentities(@$config['blurb']) ?>" />
+  <meta name='og:name' content="<?= htmlentities($config['title']) ?>">
+  <meta name='og:description' content="<?= htmlentities(@$config['blurb']) ?>">
+  <meta name='og:site_name' content="<?= htmlentities(@$config['site_name']) ?>">
   <meta name='og:type' content=website>
   <title><?= (isset($config['site_name']) ? $config['site_name'].' - ' : '').$config['title'] ?></title>
 
-- 
cgit v1.2.3-70-g09d2

