Escape < and > in updates.rss item titles

This commit is contained in:
Steve Purcell 2013-01-16 19:36:02 +00:00
parent f10631b740
commit ff96ef22c3

View file

@ -28,7 +28,7 @@
package.info_url = "#{base_url}##{pkgname}" package.info_url = "#{base_url}##{pkgname}"
%> %>
<item> <item>
<title><%= package.name %> (<%= package.version %>) --- <%= package.description %></title> <title><%= package.name %> (<%= package.version %>) --- <%= ERB::Util.html_escape package.description %></title>
<description>The <%= package.name %> package in MELPA has been updated to version <%= package.version %>.</description> <description>The <%= package.name %> package in MELPA has been updated to version <%= package.version %>.</description>
<pubDate><%= package.build_time.rfc822 %></pubDate> <pubDate><%= package.build_time.rfc822 %></pubDate>
<guid isPermaLink="true"><%= package.url %></guid> <guid isPermaLink="true"><%= package.url %></guid>