From a8e900e26161fd8a0e3115e4519b3cb4f60345d6 Mon Sep 17 00:00:00 2001
From: Will Faught <willfaught@users.noreply.github.com>
Date: Wed, 4 Oct 2023 22:03:26 -0700
Subject: [PATCH] Escape page titles in attributes

---
 layouts/_default/list.atom.xml | 2 +-
 layouts/_default/rss.xml       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/layouts/_default/list.atom.xml b/layouts/_default/list.atom.xml
index f4c346c8..2e06d8be 100644
--- a/layouts/_default/list.atom.xml
+++ b/layouts/_default/list.atom.xml
@@ -130,7 +130,7 @@
 
             {{ if and $content $paramlink }}
                 {{ $link := or (.Param "paige.feed.page_link" | markdownify) "⏎" }}
-                {{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink .Title $link }}
+                {{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink (htmlEscape .Title) $link }}
 
                 {{ $content = print $content $footer }}
             {{ end }}
diff --git a/layouts/_default/rss.xml b/layouts/_default/rss.xml
index 024653d9..b8acacc9 100644
--- a/layouts/_default/rss.xml
+++ b/layouts/_default/rss.xml
@@ -93,7 +93,7 @@
 
                 {{ if and $description $paramlink }}
                     {{ $pagelink := or (.Param "paige.feed.page_link" | markdownify) "⏎" }}
-                    {{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink $title $pagelink }}
+                    {{ $footer := printf `<p><a href="%s" title="%s">%s</a></p>` .Permalink (htmlEscape $title) $pagelink }}
 
                     {{ $description = print $description $footer }}
                 {{ end }}