From 42feeae8d068bb9388fabc3b27a6657baccbff9b Mon Sep 17 00:00:00 2001
From: aclist <92275929+aclist@users.noreply.github.com>
Date: Sun, 9 Aug 2026 21:07:37 +0900
Subject: [PATCH] fix: html escape server desc

---
 dzgui/views/dialogs/servers.py | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/dzgui/views/dialogs/servers.py b/dzgui/views/dialogs/servers.py
index 14cb719..1457ca5 100644
--- a/dzgui/views/dialogs/servers.py
+++ b/dzgui/views/dialogs/servers.py
@@ -1,3 +1,4 @@
+import html
 from typing import Self, TYPE_CHECKING
 
 from dzgui.const.constants import EXPAND, FILL
@@ -109,7 +110,7 @@ class ServerDetailsDialog(ServerDialog):
         self.view.set_model(self.store)
         text = details.description
         text = format_hyperlinks(text)
-        self.description.set_markup(text)
+        self.description.set_markup(html.escape(text))
 
         self.show_all()