From: Filippo Giunchedi <filippo@esaurito.net>
Date: Fri, 27 Mar 2009 19:09:43 +0000 (+0100)
Subject: html entity escape for Maintainer/Description/Changes
X-Git-Url: https://err.no/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9f7f390873b8ac52472f6d17ec18ecf00498d6cc;p=dak

html entity escape for Maintainer/Description/Changes
---

diff --git a/tools/queue_rss.py b/tools/queue_rss.py
index ce72d65a..fb56e189 100755
--- a/tools/queue_rss.py
+++ b/tools/queue_rss.py
@@ -5,6 +5,7 @@
 # Author: Filippo Giunchedi <filippo@debian.org>
 # Version: 0.4
 
+import cgi
 import os
 import os.path
 import cPickle
@@ -110,14 +111,14 @@ def add_rss_item(status, msg, direction):
         return False
 
     description = "<pre>Description: %s\nChanges: %s\n</pre>" % \
-            (utf2ascii(msg['Description']), utf2ascii(msg['Changes']))
+            (utf2ascii(cgi.escape(msg['Description'])), utf2ascii(cgi.escape(msg['Changes'])))
 
     feed.items.insert(0,
         PyRSS2Gen.RSSItem(
             title,
             pubDate = pubdate,
             description = description,
-            author = utf2ascii(msg['Maintainer']),
+            author = utf2ascii(cgi.escape(msg['Maintainer'])),
             link = "http://ftp-master.debian.org/new/%s_%s.html" % \
                     (msg['Source'], msg['Version'])
         )