Bug 1453697 - ensure error_message is escaped in opengraph description

diff --git a/extensions/OpenGraph/template/en/default/hook/global/header-start.html.tmpl b/extensions/OpenGraph/template/en/default/hook/global/header-start.html.tmpl
index dc0dc1ad9b24724410ae551333f1200ad109fc3d..51c388d427172fe4a891ba1a5432d0ded70b2b7f 100644 (file)
--- a/extensions/OpenGraph/template/en/default/hook/global/header-start.html.tmpl
+++ b/extensions/OpenGraph/template/en/default/hook/global/header-start.html.tmpl
@@ -14,7 +14,7 @@
 <meta property="og:description"
       content="[% bug.bug_status FILTER html %] ([% bug.assigned_to.login FILTER email FILTER html %]) in [% bug.product FILTER html %] - [% bug.component FILTER html %]. Last updated [% bug.delta_ts FILTER time('%Y-%m-%d') %].">
 [% ELSIF error_message %]
-<meta property="og:description" content="[% error_message FILTER txt %]">
+<meta property="og:description" content="[% error_message FILTER txt FILTER html %]">
 [% END %]
 [% IF og_image %]
 <meta property="og:image" content="[% urlbase FILTER none %][% og_image FILTER html %]">