escape strings in feeds

2025-10-25 23:55:56 +01:00
parent cc5528f170
commit 78c3780651
3 changed files with 13 additions and 1 deletions
--- a/src/main.rs
+++ b/src/main.rs
@@ -151,7 +151,11 @@ impl Api {
        {
            Ok(Ok(bookmarks)) => {
                for b in bookmarks {
-                    resp.push_str(&format!("<item>\n<title>{}</title>\n<link>{}</link>\n<description>{}</description>\n</item>", b.title, b.url, b.description));
+                    resp.push_str(&format!(
+                            "<item>\n<title>{}</title>\n<link>{}</link>\n<description>{}</description>\n</item>",
+                            xml::escape::escape_str_attribute(&b.title),
+                            xml::escape::escape_str_attribute(&b.url),
+                            xml::escape::escape_str_attribute(&b.description)));
                }
            }
            Ok(Err(e)) => {