diff --git a/app/views/site/past_meetup.erb b/app/views/site/past_meetup.erb
index 02a8bc0..b7751c5 100644
--- a/app/views/site/past_meetup.erb
+++ b/app/views/site/past_meetup.erb
@@ -1,7 +1,7 @@
 <%= javascript_pack_tag 'past_meetup' %>
 <%= stylesheet_pack_tag "past_meetup" %>
 <%= javascript_tag do %>
-  var year = <%= raw(params[:year]) %>
-  var month = <%= raw(params[:month]) %>
-  var day = <%= raw(params[:day]) %>
-<% end %>
+  var year = <%= raw(h(params[:year])) %>;
+  var month = <%= raw(h(params[:month])) %>;
+  var day = <%= raw(h(params[:day])) %>;
+<% end %>
\ No newline at end of file