Escape link href attr in feeds

4 months ago · 76b158fba4
parent 5d98526121
commit 76b158fba4
2 changed files with 2 additions and 2 deletions
--- a/layouts/_default/list.atom.xml
+++ b/layouts/_default/list.atom.xml
@ -167,7 +167,7 @@
                    {{ $valid := in (slice "alternate" "enclosure" "related" "self" "via") $rel }}

                    {{ if $valid }}
-                        <link href="{{ $href }}" hreflang="{{ $subpage.Language.LanguageCode }}" rel="{{ $rel }}" type="{{ .MediaType }}"/>
+                        <link href="{{ htmlEscape $href }}" hreflang="{{ $subpage.Language.LanguageCode }}" rel="{{ $rel }}" type="{{ .MediaType }}"/>
                    {{ end }}
                {{ end }}

--- a/layouts/_default/list.rss.xml
+++ b/layouts/_default/list.rss.xml
@ -154,7 +154,7 @@
                        {{ $valid := in (slice "alternate" "enclosure" "related" "self" "via") $rel }}

                        {{ if $valid }}
-                            <atom:link href="{{ $href }}" hreflang="{{ $subpage.Language.LanguageCode }}" rel="{{ $rel }}" type="{{ .MediaType }}"/>
+                            <atom:link href="{{ htmlEscape $href }}" hreflang="{{ $subpage.Language.LanguageCode }}" rel="{{ $rel }}" type="{{ .MediaType }}"/>
                        {{ end }}
                    {{ end }}