From 6593092bfd08efa9fe5dbd83a85a4fe1cac2b936 Mon Sep 17 00:00:00 2001
From: CiaranG <ciaran@ciarang.com>
Date: Sat, 23 Aug 2008 01:25:34 -0400
Subject: [PATCH] Escape profile url in xmpp in case fancy urls off (Ticket
 #521)

darcs-hash:20080823052534-f6e2c-aa452a8c2c6ee33399f4079d0bf2224847e1450a.gz
---
 lib/jabber.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/jabber.php b/lib/jabber.php
index 586cdec7ea..415bb45d73 100644
--- a/lib/jabber.php
+++ b/lib/jabber.php
@@ -123,7 +123,7 @@ function jabber_format_entry($profile, $notice) {
 	$entry = "\n<entry xmlns='http://www.w3.org/2005/Atom'>\n";
 	$entry .= "<source>\n";
 	$entry .= "<title>" . $profile->nickname . " - " . common_config('site', 'name') . "</title>\n";
-	$entry .= "<link href='" . $profile->profileurl . "'/>\n";
+	$entry .= "<link href='" . htmlspecialchars($profile->profileurl) . "'/>\n";
 	$entry .= "<link rel='self' type='application/rss+xml' href='" . common_local_url('userrss', array('nickname' => $profile->nickname)) . "'/>\n";
 	$entry .= "<author><name>" . $profile->nickname . "</name></author>\n";
 	$entry .= "<icon>" . common_profile_avatar_url($profile, AVATAR_PROFILE_SIZE) . "</icon>\n";
-- 
2.39.5