Update app.py

app.py

@@ -135,6 +135,12 @@ def publish_paper(title, authors, tags, abst, data):
         idx += 1
         if idx > 100:
             return "could not generate paperid, try again tomorrow"
+    bad_chars = "<>:|\\" # primitive anti-xss sanitization
+    for c in bad_chars:
+        title = title.replace(c, "")
+        authors = authors.replace(c, "")
+        tags = tags.replace(c, "")
+        abst = abst.replace(c, "")
     metadata = f"""---
 title: {title}
 author: {authors}