Properly escape output in routetrade test

diff --git a/yarrg/web/routetrade b/yarrg/web/routetrade
index d0d4a76624c99a5d89e2c844926b04d826f03563..bbd63a6fac87c5409df59b7fd75be02428387d35 100644 (file)
--- a/yarrg/web/routetrade
+++ b/yarrg/web/routetrade
@@ -14,7 +14,7 @@ Route is as follows:
 %   $islandid= '<undef>' unless defined $islandid;
 %   $archipelago= '<undef>' unless defined $archipelago;
 %
-  islandid=<% $islandid %>  archipelago=<% $archipelago %>
+  islandid=<% $islandid |h %>  archipelago=<% $archipelago |h %>
 %
 % }