Escape HTML in RSS feeds, rather than relying on it being valid to stuff into a CDATA...

diff --git a/templates/rssitem.tmpl b/templates/rssitem.tmpl
index 1144cd5e2b940ac2acd35b85c7ba50dde2b77f68..42936a668f591bf7cf1a9a23fae4e076e3e48988 100644 (file)
--- a/templates/rssitem.tmpl
+++ b/templates/rssitem.tmpl
@@ -21,6 +21,6 @@
        <TMPL_IF NAME="ENCLOSURE">
        <enclosure url="<TMPL_VAR ENCLOSURE>" type="<TMPL_VAR TYPE>" length="<TMPL_VAR LENGTH>" />
        <TMPL_ELSE>
-       <description><![CDATA[<TMPL_VAR CONTENT>]]></description>
+       <description><TMPL_VAR CONTENT ESCAPE=HTML></description>
        </TMPL_IF>
 </item>