gentoo / soko

[MIRROR] packages.gentoo.org (PROD)
https://gitweb.gentoo.org/sites/soko.git
GNU General Public License v2.0
7 stars 11 forks source link

Atom feed is not properly escaped #24

Closed Flowdalic closed 7 months ago

Flowdalic commented 7 months ago

The XML in the atom feed includes < characters in XML cdata which should be escaped. Take for example the following entry

<entry>
<title>app-text/texlive-core: add weak blocker for <texlive-langother-2023</title>
<updated>2024-04-02T18:46:57Z</updated>
<id>05e5afa0f215f0fdd92b7286e4018b79f7e7ba84</id>
<link href="https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=05e5afa0f215f0fdd92b7286e4018b79f7e7ba84" rel="alternate" type="text/html"/>
<author>
<name>Florian Schmaus</name>
<email>flow@gentoo.org</email>
</author>
</entry>

where contains a <code><</code> character that should be escaped to <code>&lt;</code>.</p> <p>Not properly escaping the character data leads to some news readers only displaying "app-text/texlive-core: add weak blocker for " as title.</p> </div> </div> <div class="page-bar-simple"> </div> <div class="footer"> <ul class="body"> <li>© <script> document.write(new Date().getFullYear()) </script> Githubissues.</li> <li>Githubissues is a development platform for aggregating issues.</li> </ul> </div> <script src="https://cdn.jsdelivr.net/npm/jquery@3.5.1/dist/jquery.min.js"></script> <script src="/githubissues/assets/js.js"></script> <script src="/githubissues/assets/markdown.js"></script> <script src="https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@11.4.0/build/highlight.min.js"></script> <script src="https://cdn.jsdelivr.net/gh/highlightjs/cdn-release@11.4.0/build/languages/go.min.js"></script> <script> hljs.highlightAll(); </script> </body> </html>