Fix:Export OPML not escaping characters advplyr#2487

mfcar · Jan 5, 2024 · a426da5 · a426da5
1 parent eaf6bf2
commit a426da5
Showing 1 changed file with 7 additions and 6 deletions.
diff --git a/server/utils/generators/opmlGenerator.js b/server/utils/generators/opmlGenerator.js
@@ -1,4 +1,5 @@
 const xml = require('../../libs/xml')
+const escapeForXML = require('../../libs/xml/escapeForXML')
 
 /**
  * Generate OPML file string for podcasts in a library
@@ -12,18 +13,18 @@ module.exports.generate = (podcasts, indent = true) => {
     if (!podcast.feedURL) return
     const feedAttributes = {
       type: 'rss',
-      text: podcast.title,
-      title: podcast.title,
-      xmlUrl: podcast.feedURL
+      text: escapeForXML(podcast.title),
+      title: escapeForXML(podcast.title),
+      xmlUrl: escapeForXML(podcast.feedURL)
     }
     if (podcast.description) {
-      feedAttributes.description = podcast.description
+      feedAttributes.description = escapeForXML(podcast.description)
     }
     if (podcast.itunesPageUrl) {
-      feedAttributes.htmlUrl = podcast.itunesPageUrl
+      feedAttributes.htmlUrl = escapeForXML(podcast.itunesPageUrl)
     }
     if (podcast.language) {
-      feedAttributes.language = podcast.language
+      feedAttributes.language = escapeForXML(podcast.language)
     }
     bodyItems.push({
       outline: {