From b78a6edef3b2e2d1633e5a6eeda341584c4a726d Mon Sep 17 00:00:00 2001
From: stevetwalker <29964517+stevetwalker@users.noreply.github.com>
Date: Fri, 22 May 2020 16:00:00 -0700
Subject: [PATCH] Initial commit

---
 main.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/main.py b/main.py
index fd03988..b5fb951 100644
--- a/main.py
+++ b/main.py
@@ -1,5 +1,6 @@
 import os
 import base64
+import html
 
 from flask import Flask, request
 from model import Message 
@@ -25,13 +26,13 @@ def home():
 
 <h2>Wisdom From Your Fellow Classmates</h2>
 """
-    
+
     for m in Message.select():
         body += """
 <div class="message">
 {}
 </div>
-""".format(m.content)
+""".format(html.escape(m.content, quote=True))
 
     return body