From: Simon McVittie <smcv@ http://smcv.pseudorandom.co.uk/>
Date: Thu, 31 Jul 2008 21:13:21 +0000 (+0100)
Subject: Escape HTML in RSS feeds, rather than relying on it being valid to stuff into a CDATA... 
X-Git-Tag: 2.56~5^2~1
X-Git-Url: http://git.vanrenterghem.biz/git.ikiwiki.info.git/commitdiff_plain/9b901a33647407142038175006f81e773ae5883a

Escape HTML in RSS feeds, rather than relying on it being valid to stuff into a CDATA section
---

diff --git a/templates/rssitem.tmpl b/templates/rssitem.tmpl
index 1144cd5e2..42936a668 100644
--- a/templates/rssitem.tmpl
+++ b/templates/rssitem.tmpl
@@ -21,6 +21,6 @@
 	<TMPL_IF NAME="ENCLOSURE">
 	<enclosure url="<TMPL_VAR ENCLOSURE>" type="<TMPL_VAR TYPE>" length="<TMPL_VAR LENGTH>" />
 	<TMPL_ELSE>
-	<description><![CDATA[<TMPL_VAR CONTENT>]]></description>
+	<description><TMPL_VAR CONTENT ESCAPE=HTML></description>
 	</TMPL_IF>
 </item>