search

fossar / selfoss

multipurpose rss reader, live stream, mashup, aggregation web application
https://selfoss.aditu.de
GNU General Public License v3.0
2.37k stars 344 forks source link

Author name double escaped #1317

Closed davidoskky closed 1 year ago

davidoskky commented 2 years ago

The HTML of the author name fetched is not correctly sanified.

For example, fetching with the youtube spout this channel: QualityAndTechnology The author name displayed in Selfoss is "Chemometrics & Machine Learning in Copenhagen" instead of "Chemometrics & Machine Learning in Copenhagen"

jtojnar commented 1 year ago

Thanks for reporting. I have fixed it for newly fetched items. For the old one, you can run the SQL command mentioned in the commit message.

Unfortunately, this is not the only problematic item. Courtesy of Simplepie, almost every value returned by the library (except for URIs) has HTML special characters escaped, if it is a plain text and will require a larger revamp (I started on it in https://github.com/fossar/selfoss/pull/1368 but we do not want it to delay 2.19).