Escape comment body

joeltaylor · joeltaylor · commit 069ca586462f · 2015-06-16T09:36:03.000-04:00
diff --git a/server/routes/news.js b/server/routes/news.js
@@ -244,8 +244,10 @@ router.
   post('/:slug([a-zA-Z0-9_.-]+)/comment', cookieParser, ensureAuthenticated, parseForm, expressValidator(),  csrfProtection, buildComment, function(req, res) {
     // TODO: Perhaps this should be done in the buildComment()?
     req.sanitize('body').trim();
+    req.sanitize('body').escape();
     req.check('body').notEmpty();
 
+
     var errors = req.validationErrors();
 
     if (errors) {
