@@ -9,6 +9,7 @@
99# @parse url, title, content, suggestion
1010
1111import re
12+from cgi import escape
1213from urllib import urlencode
1314from urlparse import urlparse, parse_qsl
1415from lxml import html
@@ -167,7 +168,7 @@ def parse_url(url_string, google_hostname):
167168def extract_text_from_dom(result, xpath):
168169 r = result.xpath(xpath)
169170 if len(r) > 0:
170− return extract_text(r[0])
171+ return escape(extract_text(r[0]))
171172 return None
172173
173174
@@ -273,7 +274,7 @@ def response(resp):
273274 # parse suggestion
274275 for suggestion in dom.xpath(suggestion_xpath):
275276 # append suggestion
276− results.append({'suggestion': extract_text(suggestion)})
277+ results.append({'suggestion': escape(extract_text(suggestion))})
277278
278279 # return results
279280 return results