@@ -40,7 +40,7 @@ except:
4040 logger.critical("cannot import dependency: pygments")
4141 from sys import exit
4242 exit(1)
43−
43+from cgi import escape
4444from datetime import datetime, timedelta
4545from urllib import urlencode
4646from urlparse import urlparse, urljoin
@@ -433,8 +433,9 @@ def index():
433433 for result in results:
434434 if output_format == 'html':
435435 if 'content' in result and result['content']:
436− result['content'] = highlight_content(result['content'][:1024], search_query.query.encode('utf-8'))
437− result['title'] = highlight_content(result['title'], search_query.query.encode('utf-8'))
436+ result['content'] = highlight_content(escape(result['content'][:1024]),
437+ search_query.query.encode('utf-8'))
438+ result['title'] = highlight_content(escape(result['title']), search_query.query.encode('utf-8'))
438439 else:
439440 if result.get('content'):
440441 result['content'] = html_to_text(result['content']).strip()