From 71f06d328a6a2b7fc371cb378c22b218ba86d8fb Mon Sep 17 00:00:00 2001
From: Michael Lustfield <michael@lustfield.net>
Date: Sun, 28 Jan 2024 19:38:42 -0600
Subject: [PATCH] Add html escaping to meeting-map (Closes: #8)

---
 layouts/shortcodes/meeting-map.html | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/layouts/shortcodes/meeting-map.html b/layouts/shortcodes/meeting-map.html
index 8f6ad23..65f5abf 100644
--- a/layouts/shortcodes/meeting-map.html
+++ b/layouts/shortcodes/meeting-map.html
@@ -12,7 +12,7 @@
     var locations = [
       {{- range $meeting_id, $meeting := $meetings }}
       {{- if and $meeting.longitude $meeting.latitude $meeting.name $meeting.address }}
-      [ "{{ $meeting.name }}", "<b><a class=\"maplink\" href=\"/meetings/{{ $meeting_id }}\">{{ $meeting.name }}</a></b>{{ if $meeting.place }}<br>{{ $meeting.place }}{{ end }}<br>{{ $meeting.address }}<br><a class=\"maplink\" href=\"/meetings/{{ $meeting_id }}\">Meeting Information</a>", {{ float $meeting.latitude }}, {{ float $meeting.longitude }}],{{ end }}{{ end }}
+      [ "{{ htmlEscape $meeting.name }}", "<b><a class=\"maplink\" href=\"/meetings/{{ htmlEscape $meeting_id }}\">{{ htmlEscape $meeting.name }}</a></b>{{ if $meeting.place }}<br>{{ htmlEscape $meeting.place }}{{ end }}<br>{{ htmlEscape $meeting.address }}<br><a class=\"maplink\" href=\"/meetings/{{ $meeting_id }}\">Meeting Information</a>", {{ float $meeting.latitude }}, {{ float $meeting.longitude }}],{{ end }}{{ end }}
       ];
     infowindow = new google.maps.InfoWindow();
     map = new google.maps.Map(document.getElementById("map"), {