From af0c7dea0f0bcc51fc500a329fcd148a8b4813a2 Mon Sep 17 00:00:00 2001
From: zapashcanon <leo@ndrs.fr>
Date: Sun, 7 Nov 2021 22:50:43 +0100
Subject: [PATCH] escape bio

---
 src/user.ml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/user.ml b/src/user.ml
index 361cb3a..adfa006 100644
--- a/src/user.ml
+++ b/src/user.ml
@@ -120,7 +120,7 @@ let public_profile request =
       [ [| Data.TEXT nick; Data.TEXT password; Data.TEXT email; Data.TEXT bio |]
       ] ->
     Format.sprintf "nick = `%s`; password = `%s`; email = `%s`; bio = '%s'" nick
-      password email bio
+      password email (Dream.html_escape bio)
   | Ok _ -> "incoherent db answer"
   | Error e -> Format.sprintf "db error: %s" (Rc.to_string e)