HTML escape title/artist

Jumprocks1 · Oct 26, 2023 · 3cd77c9 · 3cd77c9
1 parent 2f63783
commit 3cd77c9
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/drum-game-web/scripts/Program.cs b/drum-game-web/scripts/Program.cs
@@ -3,6 +3,7 @@
 using System.Text.Json;
 using System.Text.Json.Nodes;
 using System.Text.Json.Serialization;
+using System.Web;
 
 namespace Build;
 
@@ -168,8 +169,10 @@ static decimal GetDlevel(string[] tags)
             if (Deploy)
             {
                 var durationString = FormatTime(metadata.PlayableDuration);
+                var artist = HttpUtility.HtmlEncode(metadata.Artist);
+                var title = HttpUtility.HtmlEncode(metadata.Title);
                 var extraTags = $@"
-<meta property=""og:title"" content=""{metadata.Artist} - {metadata.Title}"" />
+<meta property=""og:title"" content=""{artist} - {title}"" />
 <meta property=""og:description"" content=""{metadata.MedianBPM} BPM - {diffString} - Length: {durationString}"" />
 <meta property=""og:image"" content=""{metadata.ImageUrl}"" />
             ";