nitdoc: Escape modifiers.

[nit.git] / src / doc / doc_templates.nit

diff --git a/src/doc/doc_templates.nit b/src/doc/doc_templates.nit
index 8384ba9..cbb625e 100644 (file)
--- a/src/doc/doc_templates.nit
+++ b/src/doc/doc_templates.nit
@@ -23,7 +23,7 @@ import json::static
 class TplPage
        super Template
 
-       # Page title in HTML header
+       # The unescaped page title to put in the HTML header.
        var title: String is writable, noinit
 
        # Page url
@@ -70,7 +70,7 @@ class TplPage
                addn " <link rel='stylesheet' href='{css}/Nitdoc.QuickSearch.css'/>"
                addn " <link rel='stylesheet' href='{css}/Nitdoc.ModalBox.css'/>"
                addn " <link rel='stylesheet' href='{css}/Nitdoc.GitHub.css'/>"
-               addn " <title>{title}</title>"
+               addn " <title>{title.html_escape}</title>"
                addn "</head>"
                add "<body"
                for attr in body_attrs do add attr
@@ -650,10 +650,10 @@ class TplLink
        # Link href
        var href: String is writable
 
-       # Text to display in the link
+       # The raw HTML content to display in the link
        var text: Streamable is writable
 
-       # Optional title
+       # The unescaped optional title.
        var title: nullable String = null is writable
 
        init with_title(href, text, title: String) do
@@ -663,11 +663,11 @@ class TplLink
 
        redef fun rendering do
                add "<a href=\""
-               add href
+               add href.html_escape
                add "\""
                if title != null then
                        add " title=\""
-                       add title.as(not null)
+                       add title.as(not null).html_escape
                        add "\""
                end
                add ">"