From 76b158fba4d5dc81caf783ced0a34b5e2714e0c0 Mon Sep 17 00:00:00 2001
From: Will Faught <willfaught@users.noreply.github.com>
Date: Mon, 10 Mar 2025 00:16:13 -0700
Subject: [PATCH] Escape link href attr in feeds

---
 layouts/_default/list.atom.xml | 2 +-
 layouts/_default/list.rss.xml  | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/layouts/_default/list.atom.xml b/layouts/_default/list.atom.xml
index 388839e3..d2e382ac 100644
--- a/layouts/_default/list.atom.xml
+++ b/layouts/_default/list.atom.xml
@@ -167,7 +167,7 @@
                     {{ $valid := in (slice "alternate" "enclosure" "related" "self" "via") $rel }}
 
                     {{ if $valid }}
-                        <link href="{{ $href }}" hreflang="{{ $subpage.Language.LanguageCode }}" rel="{{ $rel }}" type="{{ .MediaType }}"/>
+                        <link href="{{ htmlEscape $href }}" hreflang="{{ $subpage.Language.LanguageCode }}" rel="{{ $rel }}" type="{{ .MediaType }}"/>
                     {{ end }}
                 {{ end }}
 
diff --git a/layouts/_default/list.rss.xml b/layouts/_default/list.rss.xml
index 72ce4296..c56fe679 100644
--- a/layouts/_default/list.rss.xml
+++ b/layouts/_default/list.rss.xml
@@ -154,7 +154,7 @@
                         {{ $valid := in (slice "alternate" "enclosure" "related" "self" "via") $rel }}
 
                         {{ if $valid }}
-                            <atom:link href="{{ $href }}" hreflang="{{ $subpage.Language.LanguageCode }}" rel="{{ $rel }}" type="{{ .MediaType }}"/>
+                            <atom:link href="{{ htmlEscape $href }}" hreflang="{{ $subpage.Language.LanguageCode }}" rel="{{ $rel }}" type="{{ .MediaType }}"/>
                         {{ end }}
                     {{ end }}