From: Evan Prodromou <evan@prodromou.name>
Date: Mon, 14 Jul 2008 14:30:42 +0000 (-0400)
Subject: encode special chars in atom payload
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=37baa03880cabecce3074d7f4c07c3adb5821371;p=quix0rs-gnu-social.git

encode special chars in atom payload

darcs-hash:20080714143042-84dde-8da6275ea2bf0e0ce4691d8f56e1b932727efcd8.gz
---

diff --git a/lib/jabber.php b/lib/jabber.php
index d109e40c46..74e51d71a7 100644
--- a/lib/jabber.php
+++ b/lib/jabber.php
@@ -105,8 +105,8 @@ function jabber_format_entry($profile, $notice) {
 	$entry .= "<author><name>" . $profile->nickname . "</name></author>\n";
 	$entry .= "<icon>" . common_profile_avatar_url($profile, AVATAR_PROFILE_SIZE) . "</icon>\n";
 	$entry .= "</source>\n";
-	$entry .= "<title>" . $msg . "</title>\n";
-	$entry .= "<summary>" . $msg . "</summary>\n";
+	$entry .= "<title>" . htmlspecialchars($msg) . "</title>\n";
+	$entry .= "<summary>" . htmlspecialchars($msg) . "</summary>\n";
 	$entry .= "<link rel='alternate' href='" . $noticeurl . "' />\n";
 	$entry .= "<id>". $notice->uri . "</id>\n";
 	$entry .= "<published>".common_date_w3dtf($notice->created)."</published>\n";