From 8f74184a58c1b3236a5554e4464b7e1f3d8ba264 Mon Sep 17 00:00:00 2001
From: Dries Buytaert <dries@buytaert.net>
Date: Wed, 18 Jul 2001 20:21:16 +0000
Subject: - Fixed '" should be &amp;' problem in feeds.

---
 includes/common.inc | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

(limited to 'includes/common.inc')

diff --git a/includes/common.inc b/includes/common.inc
index 953e2ebeb..19a79c375 100644
--- a/includes/common.inc
+++ b/includes/common.inc
@@ -92,10 +92,10 @@ function format_info($body, $block) {
 
 function format_rss_channel($title, $link, $description, $items, $language = "en") {
   $output .= "<channel>\n";
-  $output .= " <title>". strip_tags($title) ."</title>\n";
-  $output .= " <link>". strip_tags($link) ."</link>\n";
+  $output .= " <title>". htmlentities(strip_tags($title)) ."</title>\n";
+  $output .= " <link>". htmlentities(strip_tags($link)) ."</link>\n";
   $output .= " <description>". htmlentities($description) ."</description>\n";
-  $output .= " <language>$language</language>\n";
+  $output .= " <language>". htmlentities(strip_tags($language)) ."</language>\n";
   $output .= $items;
   $output .= "</channel>\n";
 
@@ -104,8 +104,8 @@ function format_rss_channel($title, $link, $description, $items, $language = "en
 
 function format_rss_item($title, $link, $description) {
   $output .= "<item>\n";
-  $output .= " <title>". strip_tags($title) ."</title>\n";
-  $output .= " <link>". strip_tags($link) ."</link>\n";
+  $output .= " <title>". htmlentities(strip_tags($title)) ."</title>\n";
+  $output .= " <link>". htmlentities(strip_tags($link)) ."</link>\n";
   $output .= " <description>". htmlentities($description) ."</description>\n";
   $output .= "</item>\n";
 
-- 
cgit v1.2.3