proper output encoding of poll title

1 files changed, 1 insertions, 1 deletions

diff --git a/dudle.rb b/dudle.rb
index 210c367..53edbae 100644
--- a/dudle.rb
+++ b/dudle.rb
@@ -180,7 +180,7 @@ HEAD
 <div id='main'>
 #{tabs_to_html(@tab)}
 <div id='content'>
-	<h1 id='polltitle'>#{@title}</h1>
+	<h1 id='polltitle'>#{CGI.escapeHTML(@title)}</h1>
 HEAD