Escape character

dngst · Feb 10, 2024 · 0c4e158 · 0c4e158
1 parent 4fa3b8c
commit 0c4e158
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/views/search/index.html.erb b/app/views/search/index.html.erb
@@ -2,7 +2,7 @@
 
 <%= turbo_frame_tag :results_list do %>
   <p class="text-4xl mb-8 text-gray-800">
-    Search results <%= params[:q].present? ? "for \"<span class='font-semibold'>#{params[:q]}</span>\"".html_safe : "" %>
+    Search results <%= params[:q].present? ? "for \"<span class='font-semibold'>#{h(params[:q])}</span>\"".html_safe : "" %>
   </p>
 
   <div class="max-w-lg">