From fb589fd950aa97369531e0581a5b849572bff7d6 Mon Sep 17 00:00:00 2001 From: Anthony Dodd Date: Thu, 1 Dec 2016 20:53:36 -0600 Subject: [PATCH] Fix standalone '&' after HTMLEscapeString call. --- sanitize.go | 1 + 1 file changed, 1 insertion(+) diff --git a/sanitize.go b/sanitize.go index 3164215..d04e8c7 100755 --- a/sanitize.go +++ b/sanitize.go @@ -157,6 +157,7 @@ func HTML(s string) string { output = strings.Replace(output, "'", "'", -1) output = strings.Replace(output, "& ", "& ", -1) // NB space after output = strings.Replace(output, "& ", "& ", -1) // NB space after + output = strings.Replace(output, "&", "&", -1) return output }