From f93736273156f8b382479bf5bda1776d7b803800 Mon Sep 17 00:00:00 2001
From: Mischa POSLAWSKY <perl@shiar.org>
Date: Wed, 22 Mar 2017 23:29:35 +0100
Subject: [PATCH] browser: escape titles in resource links

Recent data includes at least "<textarea>" in #readonly-attr,
breaking further HTML if left unescaped.
---
 browser.plp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/browser.plp b/browser.plp
index f8b20a9..4a964fd 100644
--- a/browser.plp
+++ b/browser.plp
@@ -339,7 +339,7 @@ sub saytitlecol {
 		say '</p>';
 	}
 	printf 'Resources: %s.', join(', ', map {
-		sprintf '<a href="%s">%s</a>', EscapeHTML($_->{url}), $_->{title}
+		sprintf '<a href="%s">%s</a>', EscapeHTML($_->{url}), EscapeHTML($_->{title})
 	} @$_) for grep { @$_ } $row->{links} // ();
 	printf '<br>Parent feature: %s.', join(', ', map {
 		sprintf '<a href="%s">%s</a>', EscapeHTML("#$_"), $caniuse->{data}->{$_}->{title}
-- 
2.30.0