From a27a8ed01a322e0af33d0b260a3234f4d4a105da Mon Sep 17 00:00:00 2001
From: lolcat <will@lolcat.ca>
Date: Tue, 27 Oct 2026 01:12:32 -0400
Subject: [PATCH] fix potential xss with scraper supplied data in table, ty
 cynic

---
 web.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/web.php b/web.php
index 8fd35a2..e516f9f 100644
--- a/web.php
+++ b/web.php
@@ -349,8 +349,8 @@ if(count($results["answer"]) !== 0){
 				
 				$right["answer"] .=
 					'<tr>' . 
-						'<td>' . $info . '</td>' .
-						'<td>' . $value . '</td>' .
+						'<td>' . htmlspecialchars($info) . '</td>' .
+						'<td>' . htmlspecialchars($value) . '</td>' .
 					'</tr>';
 			}