From 89e95cd6b16ce2af4abd23b077eab2c7278a1a6a Mon Sep 17 00:00:00 2001
From: Anand Doshi <anand@erpnext.com>
Date: Thu, 30 Apr 2015 15:09:06 -0700
Subject: [PATCH] Strip HTML tags and escape special characters in <meta>.
 Fixes frappe/erpnext_com#53

---
 frappe/templates/includes/meta_block.html   | 2 +-
 frappe/website/doctype/web_page/web_page.py | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/frappe/templates/includes/meta_block.html b/frappe/templates/includes/meta_block.html
index e311040606..4e69e5e484 100644
--- a/frappe/templates/includes/meta_block.html
+++ b/frappe/templates/includes/meta_block.html
@@ -1,5 +1,5 @@
 {%- if metatags -%}
 {%- for name in metatags %}
-<meta name="{{ name }}" content="{{ metatags[name]|striptags }}" data-html-block="meta_block">
+<meta name="{{ name }}" content="{{ metatags[name]|striptags|escape }}" data-html-block="meta_block">
 {%- endfor -%}
 {%- endif -%}
diff --git a/frappe/website/doctype/web_page/web_page.py b/frappe/website/doctype/web_page/web_page.py
index 3e2587a06f..ff8561ddac 100644
--- a/frappe/website/doctype/web_page/web_page.py
+++ b/frappe/website/doctype/web_page/web_page.py
@@ -146,7 +146,7 @@ class WebPage(WebsiteGenerator):
 	def set_metatags(self, context):
 		context.metatags = {
 			"name": context.title,
-			"description": context.description or strip_html((context.main_section or "").replace("\n", " "))[:500]
+			"description": (context.description or context.main_section or "").replace("\n", " ")[:500]
 		}
 
 		image = find_first_image(context.main_section or "")