From 07492b7b39cc2af13db4d03f69ea34bb2bcdd698 Mon Sep 17 00:00:00 2001
From: Zed <zedeus@pm.me>
Date: Wed, 10 Jun 2020 17:17:17 +0200
Subject: [PATCH] Escape rss titles

Fixes #168
---
 src/views/rss.nimf | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/src/views/rss.nimf b/src/views/rss.nimf
index 727cd3d..1600820 100644
--- a/src/views/rss.nimf
+++ b/src/views/rss.nimf
@@ -69,6 +69,7 @@
 #var title = profile.fullname
 #if not multi: title &= " / " & user
 #end if
+#title = xmltree.escape(title)
 <?xml version="1.0" encoding="UTF-8"?>
 <rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
   <channel>
@@ -100,7 +101,7 @@
 <rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
   <channel>
     <atom:link href="${link}" rel="self" type="application/rss+xml" />
-    <title>${list.name} / @${list.username}</title>
+    <title>${xmltree.escape(list.name)} / @${list.username}</title>
     <link>${link}</link>
     <description>Twitter feed for: ${list.name} by @${list.username}. Generated by ${hostname}</description>
     <language>en-us</language>
@@ -113,14 +114,15 @@
 #proc renderSearchRss*(tweets: seq[Tweet]; name, param, hostname: string): string =
 #let prefs = Prefs(replaceTwitter: hostname, replaceYouTube: "invidio.us")
 #let link = &"https://{hostname}/search"
+#let escName = xmltree.escape(name)
 #result = ""
 <?xml version="1.0" encoding="UTF-8"?>
 <rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/" version="2.0">
   <channel>
     <atom:link href="${link}" rel="self" type="application/rss+xml" />
-    <title>Search results for "${name}"</title>
+    <title>Search results for "${escName}"</title>
     <link>${link}</link>
-    <description>Twitter feed for search "${name}". Generated by ${hostname}</description>
+    <description>Twitter feed for search "${escName}". Generated by ${hostname}</description>
     <language>en-us</language>
     <ttl>40</ttl>
     ${renderRssTweets(tweets, prefs, hostname)}