From 39944454324b4c66b8cf2444cca17c149208dfac Mon Sep 17 00:00:00 2001
From: Thomas Lange <code@nerdmind.de>
Date: Mon, 24 Apr 2017 17:15:41 +0200
Subject: HTML escaping is required to prevent XML validation errors for some
 characters like "&".

---
 template/standard/html/feed/item_page.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'template/standard/html/feed/item_page.php')

diff --git a/template/standard/html/feed/item_page.php b/template/standard/html/feed/item_page.php
index ac3d197..f1a7a4d 100644
--- a/template/standard/html/feed/item_page.php
+++ b/template/standard/html/feed/item_page.php
@@ -13,7 +13,7 @@
 	<guid isPermaLink="false"><?=$PAGE['GUID']?></guid>
 	<pubDate><?=parseDatetime($PAGE['ATTR']['TIME_INSERT'], '[RFC2822]')?></pubDate>
 	<dc:creator><?=escapeHTML($USER['ATTR']['FULLNAME'])?></dc:creator>
-	<description><?=description($PAGE['BODY']['HTML'], 400)?></description>
+	<description><?=escapeHTML(description($PAGE['BODY']['HTML'], 400))?></description>
 	<content:encoded>
 		<![CDATA[
 			<?=$PAGE['BODY']['HTML']?>
-- 
cgit v1.2.3