From ef9f6ba9c7e782e3a930ffd85566f392c99a6d04433c3c830be798092880040a Mon Sep 17 00:00:00 2001
From: WlodekM <wlodzio.maly@gmail.com>
Date: Thu, 8 Jan 2026 13:18:03 +0200
Subject: [PATCH] satanize ampersand

---
 index.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.js b/index.js
index 70749f4..2b5de75 100644
--- a/index.js
+++ b/index.js
@@ -53,7 +53,7 @@ function verifyToken(token) {
 	return split[0];
 }
 function sanitiseStringHTML(str) {
-	return str.replaceAll(">", "&gt;").replaceAll("<", "&lt;");
+	return str.replaceAll("&", "&amp;").replaceAll(">", "&gt;").replaceAll("<", "&lt;");
 }
 
 app.use(express.urlencoded());