Escape page titles in attributes

2 years ago · a8e900e261
parent da1eace490
commit a8e900e261
2 changed files with 2 additions and 2 deletions
--- a/layouts/_default/list.atom.xml
+++ b/layouts/_default/list.atom.xml
@ -130,7 +130,7 @@

            {{ if and $content $paramlink }}
                {{ $link := or (.Param "paige.feed.page_link" | markdownify) "⏎" }}
-                {{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink .Title $link }}
+                {{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink (htmlEscape .Title) $link }}

                {{ $content = print $content $footer }}
            {{ end }}
--- a/layouts/_default/rss.xml
+++ b/layouts/_default/rss.xml
@ -93,7 +93,7 @@

                {{ if and $description $paramlink }}
                    {{ $pagelink := or (.Param "paige.feed.page_link" | markdownify) "⏎" }}
-                    {{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink $title $pagelink }}
+                    {{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink (htmlEscape $title) $pagelink }}

                    {{ $description = print $description $footer }}
                {{ end }}