name property is plaintext

4 years ago · 91346fa369
parent d20029be7a
commit 91346fa369
1 changed files with 1 additions and 1 deletions
--- a/activity.go
+++ b/activity.go
@ -665,7 +665,7 @@ func xonksaver(user *WhatAbout, item junk.Junk, origin string) *Honk {
 				if precis != "" {
 					content = precis + "<p>" + content
 				}
-				precis = name
+				precis = html.EscapeString(name)
 			}
 			if sens, _ := obj["sensitive"].(bool); sens && precis == "" {
 				precis = "unspecified horror"