escape html

[ndwebbie.git] / ND / Web / Pages / Calls.pm

diff --git a/ND/Web/Pages/Calls.pm b/ND/Web/Pages/Calls.pm
index 3877de9f152bbc9190a2a53809c0bba4c2a6317e..cbeaa05707301ed1fd71b921a06521ab3f682906 100644 (file)
--- a/ND/Web/Pages/Calls.pm
+++ b/ND/Web/Pages/Calls.pm
@@ -126,7 +126,7 @@ sub render_body {
                $BODY->param(DefensePoints => $call->{defense_points});
                $BODY->param(LandingTick => $call->{landing_tick});
                $BODY->param(ETA => $call->{landing_tick}-$self->{TICK});
-               $BODY->param(Info => $call->{info});
+               $BODY->param(Info => escapeHTML $call->{info});
                $BODY->param(DC => $call->{dc});
                if ($call->{covered}){
                        $BODY->param(Cover => 'Uncover');