From 6b1c6179d1a1a865716d48bb2e832daf129458d1 Mon Sep 17 00:00:00 2001
From: Jeremy Zhang <jkzhang@uw.edu>
Date: Sat, 20 Jan 2018 20:51:37 +0000
Subject: [PATCH] Escape guild name in embed

---
 webapp/titanembeds/templates/embed.html.j2          | 2 +-
 webapp/titanembeds/templates/opengraph_tags.html.j2 | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/webapp/titanembeds/templates/embed.html.j2 b/webapp/titanembeds/templates/embed.html.j2
index 943a58f..6e1022b 100644
--- a/webapp/titanembeds/templates/embed.html.j2
+++ b/webapp/titanembeds/templates/embed.html.j2
@@ -27,7 +27,7 @@
       {% include "opengraph_tags.html.j2" %}
     {% endwith %}
 
-    <title>{{ guild['name'] }} - Embed - Titan Embeds for Discord</title>
+    <title>{{ guild['name']|e }} - Embed - Titan Embeds for Discord</title>
     {% include 'google_analytics.html.j2' %}
     <script src='https://www.google.com/recaptcha/api.js'></script>
     
diff --git a/webapp/titanembeds/templates/opengraph_tags.html.j2 b/webapp/titanembeds/templates/opengraph_tags.html.j2
index 1040790..6e693db 100644
--- a/webapp/titanembeds/templates/opengraph_tags.html.j2
+++ b/webapp/titanembeds/templates/opengraph_tags.html.j2
@@ -1,5 +1,5 @@
-<meta property="og:title" content="{{ title }} page on Titan Embeds for Discord" />
+<meta property="og:title" content="{{ title|e }} page on Titan Embeds for Discord" />
 <meta property="og:type" content="website" />
 <meta property="og:url" content="{{ request.base_url }}" />
 <meta property="og:image" content="{{ url_for('static', filename='img/titanembeds_square.png', _external=True) if not image else image }}" />
-<meta property="og:description" content="{{ description }}" />
\ No newline at end of file
+<meta property="og:description" content="{{ description|e }}" />
\ No newline at end of file