From 6963c44e600318eb311611f98cee2a08d417c511 Mon Sep 17 00:00:00 2001
From: TheEssem <smswessem@gmail.com>
Date: Mon, 2 Mar 2020 10:13:49 -0600
Subject: [PATCH] Properly sanitize text on motivate

---
 commands/motivate.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/commands/motivate.js b/commands/motivate.js
index 5848835..86a127d 100644
--- a/commands/motivate.js
+++ b/commands/motivate.js
@@ -15,12 +15,12 @@ exports.run = async (message, args) => {
   const size = await gm(buffer).sizePromise();
   await gm(buffer).coalesce().background("black").gravity("Center").extent(600, size.height + 50).writePromise(file);
   const size2 = await gm(file).sizePromise();
-  await gm().background("black").out("-size", "600").fill("white").font("Times").pointSize(56).gravity("Center").out(`pango:${topText}`).gravity("South").out("-splice", bottomText ? "0x0" : "0x20").writePromise(text);
+  await gm().background("black").out("-size", "600").fill("white").font("Times").pointSize(56).gravity("Center").out(`pango:${topText.replace(/&/g, "\\&amp;").replace(/>/g, "\\&gt;").replace(/</g, "\\&lt;").replace(/"/g, "\\&quot;").replace(/'/g, "\\&apos;")}`).gravity("South").out("-splice", bottomText ? "0x0" : "0x20").writePromise(text);
   const size3 = await gm(text).sizePromise();
   const command2 = gm(file).gravity("North").coalesce().background("black").extent(600, size2.height + size3.height).out("null:", "(", text, "-set", "page", `+0+${size2.height}`, ")", "-layers", "composite", "-layers", "optimize");
   let resultBuffer;
   if (bottomText) {
-    await gm().background("black").out("-size", "600").fill("white").font("Times").pointSize(28).gravity("Center").out(`pango:${bottomText}`).gravity("South").out("-splice", "0x20").writePromise(text2);
+    await gm().background("black").out("-size", "600").fill("white").font("Times").pointSize(28).gravity("Center").out(`pango:${bottomText.replace(/&/g, "\\&amp;").replace(/>/g, "\\&gt;").replace(/</g, "\\&lt;").replace(/"/g, "\\&quot;").replace(/'/g, "\\&apos;")}`).gravity("South").out("-splice", "0x20").writePromise(text2);
     const size4 = await gm(text2).sizePromise();
     resultBuffer = await gm(await command2.bufferPromise(image.type)).gravity("North").coalesce().background("black").extent(600, size2.height + size3.height + size4.height).out("null:", "(", text2, "-set", "page", `+0+${size2.height + size3.height}`, ")", "-layers", "composite", "-layers", "optimize").bufferPromise(image.type);
   } else {