From 56f994c837834d17cbdeb006b888c91b499ef32d Mon Sep 17 00:00:00 2001
From: Bel LaPointe <153096461+breel-render@users.noreply.github.com>
Date: Wed, 12 Feb 2025 16:11:40 -0700
Subject: [PATCH] escape

---
 src/state/fsm/priceiswrong/events.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/state/fsm/priceiswrong/events.go b/src/state/fsm/priceiswrong/events.go
index e2c10a1..4f6092f 100644
--- a/src/state/fsm/priceiswrong/events.go
+++ b/src/state/fsm/priceiswrong/events.go
@@ -36,7 +36,7 @@ func (p *PriceIsWrong) apply(e priceiswrong.Event) error {
 	case *priceiswrong.Guess:
 		for i := range p.Contestants {
 			if p.Contestants[i].ID == e.ID {
-				p.Contestants[i].Guess = e.Guess
+				p.Contestants[i].Guess = html.EscapeString(e.Guess)
 			}
 		}
 	}