From e86897c7c3ce7dea169be7f2c027aae3a7a4edab Mon Sep 17 00:00:00 2001 From: erdgeist Date: Sat, 27 Jun 2026 20:29:25 +0200 Subject: Stop forcing escaped HTML into the database just because XML Builder was used wrong --- app/views/rss/updates.rdf.builder | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'app/views/rss/updates.rdf.builder') diff --git a/app/views/rss/updates.rdf.builder b/app/views/rss/updates.rdf.builder index cc63201e..b02d34ff 100644 --- a/app/views/rss/updates.rdf.builder +++ b/app/views/rss/updates.rdf.builder @@ -17,9 +17,9 @@ xml.tag!("rdf:RDF", "xmlns:rdf" => "http://www.w3.org/1999/02/22-rdf-syntax-ns#" @items.each do |item| xml.item("rdf:about" => content_url(:page_path => item.node.unique_path)) do - xml.title(item.title) + xml.title(CGI.escapeHTML(item.title.to_s)) xml.link(content_url(:page_path => item.node.unique_path)) - xml.description(item.abstract) + xml.description(CGI.escapeHTML(item.abstract.to_s)) xml.tag!("dc:creator", (item.user ? item.user.login : "CCC")) xml.tag!("dc:date", item.published_at.xmlschema) end -- cgit v1.3