Strip HTML tags and escape special characters in <meta>. Fixes frappe/erpnext_com#53

frappe/templates/includes/meta_block.html

@@ -1,5 +1,5 @@
 {%- if metatags -%}
 {%- for name in metatags %}
-<meta name="{{ name }}" content="{{ metatags[name]|striptags }}" data-html-block="meta_block">
+<meta name="{{ name }}" content="{{ metatags[name]|striptags|escape }}" data-html-block="meta_block">
 {%- endfor -%}
 {%- endif -%}

frappe/website/doctype/web_page/web_page.py

@@ -146,7 +146,7 @@ class WebPage(WebsiteGenerator):
 	def set_metatags(self, context):
 		context.metatags = {
 			"name": context.title,
-			"description": context.description or strip_html((context.main_section or "").replace("\n", " "))[:500]
+			"description": (context.description or context.main_section or "").replace("\n", " ")[:500]
 		}
 
 		image = find_first_image(context.main_section or "")