Add escaping to world list in main menu (fixes #896).

diff --git a/builtin/mainmenu.lua b/builtin/mainmenu.lua
index 490f9ae4e1af968fcaff58f071cf192ce1511f76..ab8dbe144a39ed4a5dbf1c26487b586d2b64a63b 100644 (file)
--- a/builtin/mainmenu.lua
+++ b/builtin/mainmenu.lua
@@ -169,8 +169,8 @@ function menu.render_world_list()
                        retval = retval ..","
                end
                
-               retval = retval .. v.name .. 
-                                       " \\[" .. v.gameid .. "\\]"
+               retval = retval .. engine.formspec_escape(v.name) ..
+                                       " \\[" .. engine.formspec_escape(v.gameid) .. "\\]"
        end
 
        return retval