escape search results

1 files changed, 1 insertions, 1 deletions

diff --git a/static/script.js b/static/script.js
index 81d7fc5..d4e24ab 100644
--- a/static/script.js
+++ b/static/script.js
@@ -125,7 +125,7 @@ function search(query) {
 				var title = entries[i].title.$t;
 				var id = entries[i].media$group.yt$videoid.$t;
 				var html = '<li id="r_' + id + '">';
-				html += '<a href="javascript:add(\'' + id + '\', \'' + title + '\')">';
+				html += '<a href="javascript:add(\'' + id + '\', \'' + escape(title) + '\')">';
 				html += '<img src="http://i.ytimg.com/vi/' + id  + '/1.jpg" alt="' + id + '">';
 				html +=	title;
 				html += '</a></li>';