1 files changed, 2 insertions, 0 deletions
diff --git a/app.py b/app.py
index eb6d9c3..de2a5af 100644
--- a/app.py
+++ b/app.py
@@ -4,6 +4,7 @@ import json
 import string
 import random
 import re
+import html
 from utils import get_drinks_like
 from collections import defaultdict
 
@@ -149,6 +150,7 @@ def search():
     q = request.form.get('q')
     if not q:
         return redirect('/')
+    q = html.escape(q)
     brewery, beer_name = q.split(' — ')
     print('SEARCHING: ', q)
     beer_id, brewery_id = name_list[q].split('-')