From 23dcdef26f2481d7dcfcbc55de12c5284f2e540e Mon Sep 17 00:00:00 2001
From: ashisgreat22 <dev@ashisgreat.xyz>
Date: Sun, 22 Mar 2026 22:19:07 +0100
Subject: [PATCH] fix: unescape HTML entities in result titles

Wikipedia returns HTML entities like &lt;span&gt; which were being
double-escaped by Go templates. Now using html.UnescapeString and
template.HTML to render properly.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 internal/views/templates/result_item.html |  4 ++--
 internal/views/views.go                   | 12 +++++++++++-
 2 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/internal/views/templates/result_item.html b/internal/views/templates/result_item.html
index cf1c33b..cc548e2 100644
--- a/internal/views/templates/result_item.html
+++ b/internal/views/templates/result_item.html
@@ -1,7 +1,7 @@
 {{define "result_item"}}
 <article class="result">
   <div class="result_header">
-    <a href="{{.URL}}" target="_blank" rel="noopener noreferrer">{{.Title}}</a>
+    <a href="{{.URL}}" target="_blank" rel="noopener noreferrer">{{.SafeTitle}}</a>
   </div>
   <div class="result_url">
     <img class="result-favicon" src="https://www.google.com/s2/favicons?domain={{.URL | urlquery}}&sz=32" alt="" loading="lazy" onerror="this.style.display='none'">
@@ -9,7 +9,7 @@
     <span class="engine-badge">{{.Engine}}</span>
   </div>
   {{if .Content}}
-  <p class="result_content">{{.Content}}</p>
+  <p class="result_content">{{.SafeContent}}</p>
   {{end}}
 </article>
 {{end}}
diff --git a/internal/views/views.go b/internal/views/views.go
index 4162a03..9bd0845 100644
--- a/internal/views/views.go
+++ b/internal/views/views.go
@@ -19,6 +19,7 @@ package views
 import (
 	"embed"
 	"encoding/xml"
+	"html"
 	"html/template"
 	"io/fs"
 	"net/http"
@@ -70,6 +71,10 @@ type ResultView struct {
 	// TemplateName is the actual template to dispatch to, computed from Template.
 	// "videos" maps to "video_item", everything else maps to "result_item".
 	TemplateName string
+	// SafeTitle and SafeContent are HTML-unescaped versions for rendering.
+	// The API returns HTML entities which Go templates escape by default.
+	SafeTitle   template.HTML
+	SafeContent template.HTML
 }
 
 // PageNumber represents a numbered pagination button.
@@ -205,7 +210,12 @@ func FromResponse(resp contracts.SearchResponse, query string, pageno int, activ
 			r.URL = &safe
 		}
 		r.Thumbnail = util.SanitizeResultURL(r.Thumbnail)
-		pd.Results[i] = ResultView{MainResult: r, TemplateName: tmplName}
+		pd.Results[i] = ResultView{
+			MainResult:   r,
+			TemplateName: tmplName,
+			SafeTitle:    template.HTML(html.UnescapeString(r.Title)),
+			SafeContent:  template.HTML(html.UnescapeString(r.Content)),
+		}
 	}
 
 	// Convert answers (they're map[string]any — extract string values).