html encode stuff

diff --git a/scripts/youtube.cgi b/scripts/youtube.cgi
index 39250f4199b44a9458a7e55d8663d7146042158f..8cde9795c9b3811c322765dc1bbaf6d58e32ea0d 100755 (executable)
--- a/scripts/youtube.cgi
+++ b/scripts/youtube.cgi
@@ -120,7 +120,7 @@ def cgimain():
        except VideoUnavailable, e:
                print_form(
                        url=url,
-                       msg="<p class='error'>Sorry, there was an error: %s</p>" % e.message
+                       msg="<p class='error'>Sorry, there was an error: %s</p>" % cgi.escape(e.message)
                )
        except Exception, e:
                print_form(