From 27f96943a2a699187a9b37018bbc7847c0572c96 Mon Sep 17 00:00:00 2001
From: Florian Bruhin <git@the-compiler.org>
Date: Mon, 31 Oct 2016 07:50:56 +0100
Subject: [PATCH] Add missing html.escape

---
 qutebrowser/mainwindow/prompt.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/qutebrowser/mainwindow/prompt.py b/qutebrowser/mainwindow/prompt.py
index 3e2ea3999..63317e5b9 100644
--- a/qutebrowser/mainwindow/prompt.py
+++ b/qutebrowser/mainwindow/prompt.py
@@ -447,7 +447,8 @@ class _BasePrompt(QWidget):
 
     def _init_title(self, question):
         assert question.title is not None, question
-        title = '<font size="4"><b>{}</b></font>'.format(question.title)
+        title = '<font size="4"><b>{}</b></font>'.format(
+            html.escape(question.title))
         title_label = QLabel(title, self)
         self._vbox.addWidget(title_label)
         if question.text is not None: