blog/rss.xml escapes HTML

2026-06-18 19:03:24 +01:00
parent c179adccb2
commit e8754afca2
1 changed files with 8 additions and 1 deletions
@@ -29,7 +29,14 @@ DATE_PUBLISHED_RFC_822="$(TZ=UT date --date="${POST_ID}" +"%a, %d %b %Y %H:%M:%S
 <description>${POST_DESCRIPTION:-${POST_TITLE}}</description>
 <content:encoded>
 #!
-pp "${SRC}/blog/$post" "${SITE_URL}"
+pp "${SRC}/blog/$post" "${SITE_URL}" \
+  | sed "s/&/\\&amp;/g" \
+  | sed "s/</\\&lt;/g" \
+  | sed "s/>/\\&gt;/g" \
+  | sed "s/\"/\\&quot;/g" \
+  | sed "s/'/\\&#x27;/g" \
+  | sed "s/\`/\\&#x60;/g" \
+  | sed "s/\\\$/\\\\\$/g"
 #!
 </content:encoded>
 <author>Joe Carstairs</author>