diff --git a/search/index.html b/search/index.html
index 77309b6..296e579 100644
--- a/search/index.html
+++ b/search/index.html
@@ -18,7 +18,7 @@
fetch(searchEndpoint).then(function(res) {
return res.json()
}).then(function(posts) {
- document.getElementById('search-params').innerHTML = urlParams.get('query');
+ document.getElementById('search-params').innerHTML = encodeHTML(urlParams.get('query'));
if (posts.web.results.length > 0) {
document.getElementById('search-results').classList.remove('display-none');
document.getElementById('no-results').classList.add('display-none');
@@ -48,6 +48,13 @@
document.getElementById('search-results').innerHTML = (append == true) ? previous + content : content;
}
+ function encodeHTML(str) {
+ return str.replace(/&/g, '&')
+ .replace(//g, '>')
+ .replace(/"/g, '"')
+ .replace(/'/g, ''');
+ }
//]]>