Add escaping

index.js

@@ -7,7 +7,8 @@ const photoCounter = require('./middleware/photocount');
 app.set('view engine', 'ejs');
 
 app.get('/', renderer('chatscreen'));
-app.get('/photocount', photoCounter());
+app.get('/photocount', photoCounter('./static/pictures'));
+app.get('/activitycount', photoCounter('./static/activity_images'));
 app.use(express.static('static'));
 
 const server_port = 3000;

middleware/photocount.js

 const fs = require('fs');
-const dir = './static/pictures';
 
-module.exports = function () {
+module.exports = function (folder) {
     return function (req, res, next) {
-        return fs.readdir(dir, (err, files) => {
+        return fs.readdir(folder, (err, files) => {
             res.status(200).send({ count: files.length });
         });
     }

static/chat.js

@@ -22,6 +22,8 @@ function tellWhatDoing() {
             '<div class="message catmessage" style="padding: 0"><img class="previewpic" src="/pictures/16.jpg"></div>',
             '<div class="message catmessage" style="padding: 0"><img class="previewpic" src="/pictures/17.jpg"></div>',
             '<div class="message catmessage" style="padding: 0"><img class="previewpic" src="/pictures/18.jpg"></div>',
+            '<div class="message catmessage" style="padding: 0"><img class="previewpic" src="/activity_images/1.jpg"></div>',
+            '<div class="message catmessage" style="padding: 0"><img class="previewpic" src="/activity_images/2.jpg"></div>',
         ];
         resolve(activities[Math.floor(Math.random() * activities.length)]);
     });