From d6033c7330cb5b2d397663a8297b86d0873211d2 Mon Sep 17 00:00:00 2001
From: Oleg Broytman <phd@phdru.name>
Date: Sat, 9 Jul 2016 21:30:57 +0300
Subject: [PATCH] HTML-escape expression in the output (to quote &)

---
 README         | 2 +-
 TODO           | 3 ---
 search-tags.py | 4 ++--
 3 files changed, 3 insertions(+), 6 deletions(-)

diff --git a/README b/README
index 57d3b0b..b8b749c 100644
--- a/README
+++ b/README
@@ -1,4 +1,4 @@
 Search for tags in my blog.
 Author: Oleg Broytman <phd@phdru.name>
-Copyright (C) 2014, 2015 PhiloSoft Design.
+Copyright (C) 2014-2016 PhiloSoft Design.
 License: GPL.
diff --git a/TODO b/TODO
index 0771341..f6f494c 100644
--- a/TODO
+++ b/TODO
@@ -1,6 +1,3 @@
-HTML-escape expression in the output (to quote &).
-
-
 Use grako instead of PLY.
 
 
diff --git a/search-tags.py b/search-tags.py
index fe006bf..e40f05c 100755
--- a/search-tags.py
+++ b/search-tags.py
@@ -3,7 +3,7 @@
 """Search tags CGI"""
 
 __author__ = "Oleg Broytman <phd@phdru.name>"
-__copyright__ = "Copyright (C) 2014 PhiloSoft Design"
+__copyright__ = "Copyright (C) 2014-2016 PhiloSoft Design"
 __license__ = "GNU GPL"
 
 import cgi, sys
@@ -42,7 +42,7 @@ else:
         from tags import find_tags
         posts = find_tags(tree)
         status = None
-        title = "úÁÐÉÓÉ, ÎÁÊÄÅÎÎÙÅ ÄÌÑ ×ÙÒÁÖÅÎÉÑ " + q
+        title = "úÁÐÉÓÉ, ÎÁÊÄÅÎÎÙÅ ÄÌÑ ×ÙÒÁÖÅÎÉÑ " + cgi.escape(q)
         if posts:
             _posts = ["""\
 <p class="head">
-- 
2.39.2