From e9b62cd3ae806ef2a060cec1ad6242d2908287a0 Mon Sep 17 00:00:00 2001
From: Ralf <ralf@uwu.plus>
Date: Wed, 2 Jun 2021 21:23:36 +0200
Subject: [PATCH] escape the prompt too

---
 aiserver.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/aiserver.py b/aiserver.py
index 23229cd0..8dcec2af 100644
--- a/aiserver.py
+++ b/aiserver.py
@@ -1091,7 +1091,7 @@ def applyoutputformatting(txt):
 # Sends the current story content to the Game Screen
 #==================================================================#
 def refresh_story():
-    text_parts = ['<chunk n="0" id="n0">', vars.prompt, '</chunk>']
+    text_parts = ['<chunk n="0" id="n0">', html.escape(vars.prompt), '</chunk>']
     for idx, item in enumerate(vars.actions, start=1):
         text_parts.extend(('<chunk n="', str(idx), '" id="n', str(idx), '">', html.escape(item), '</chunk>'))
     emit('from_server', {'cmd': 'updatescreen', 'data': formatforhtml(''.join(text_parts))})