Fix possible XSS in yaml-metadata and turn using ejs escape syntax than external lib [Security Issue]

1 files changed, 1 insertions, 1 deletions

diff --git a/public/views/disqus.ejs b/public/views/disqus.ejs
index ed991a41..cceaa85c 100644
--- a/public/views/disqus.ejs
+++ b/public/views/disqus.ejs
@@ -5,7 +5,7 @@ var disqus_config = function () {
 };
 (function() {
     var d = document, s = d.createElement('script');
-    s.src = '//<%- disqus %>.disqus.com/embed.js';
+    s.src = '//<%= disqus %>.disqus.com/embed.js';
     s.setAttribute('data-timestamp', +new Date());
     (d.head || d.body).appendChild(s);
 })();