Make our API server packages for debian-based distributions depend on
[arvados.git] / tools / crunchstat-summary / crunchstat_summary / chartjs.py
index 590df27fff02224c3fa9e9b7324ffb4ed8186884..fb30041889c726e4cc14d93a5aaeb7b4e1fbbbd9 100644 (file)
@@ -1,5 +1,6 @@
 from __future__ import print_function
 
+import cgi
 import json
 import pkg_resources
 
@@ -19,7 +20,7 @@ class ChartJS(object):
         <script type="text/javascript" src="{}"></script>
         <script type="text/javascript">{}</script>
         </head><body></body></html>
-        '''.format(self.label, self.JSLIB, self.js())
+        '''.format(cgi.escape(self.label), self.JSLIB, self.js())
 
     def js(self):
         return 'var sections = {};\n{}'.format(