escape more

diff --git a/demos/chat/templates/message.html b/demos/chat/templates/message.html
index 2ebd1b2892c6737e88e5f15dd9750b125fb93867..4445cbdfaff76a7b82da654e6782b2781d01d135 100644 (file)
--- a/demos/chat/templates/message.html
+++ b/demos/chat/templates/message.html
@@ -1 +1 @@
-<div class="message" id="m{{ message["id"] }}"><b>{{ message["from"] }}: </b>{{ escape(message["body"]) }}</div>
+<div class="message" id="m{{ message["id"] }}"><b>{{ escape(message["from"]) }}: </b>{{ escape(message["body"]) }}</div>