fix: fixes #1208

RDFLib · Dec 4, 2020 · 1ee96eb · 1ee96eb
1 parent c5ff127
commit 1ee96eb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/rdflib/tools/rdf2dot.py b/rdflib/tools/rdf2dot.py
@@ -153,7 +153,7 @@ def color(p):
             + "<font point-size='10' color='#6666ff'>%s</font></td>"
             + "</tr>%s</table> > ] \n"
         )
-        stream.write(opstr % (n, NODECOLOR, label(u, g), u, u, "".join(f)))
+        stream.write(opstr % (n, NODECOLOR, html.escape(label(u, g)), u, html.escape(u), "".join(f)))
 
     stream.write("}\n")