From a75a76b164c7512effa94f370cadfc094f006a1e Mon Sep 17 00:00:00 2001
From: =?utf8?q?Paul=20H=C3=A4nsch?= <paul@plutz.net>
Date: Fri, 12 Mar 2021 11:25:45 +0100
Subject: [PATCH] escape search string for display

---
 widgets.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/widgets.sh b/widgets.sh
index 5cd371b..4b36b35 100644
--- a/widgets.sh
+++ b/widgets.sh
@@ -218,7 +218,7 @@ w_advsearch(){
 	printf '[label [checkbox "tag_%s" "%s" %s] %s]' "$n" "$tag" "$t" "$d"
       done
       d="${f##*\$:}" d="${d%%\|*}"
-      [ "$category" = \$ ] && printf '[input name="tag_%i" value="%s"]' "$n" "$d"
+      [ "$category" = \$ ] && printf '[input name="tag_%i" value="%s"]' "$n" "$(HTML "$d")"
       printf '\n]'
     done
     printf ']'
-- 
2.39.2