search

glacials / splits-io

a speedrunning data store and analysis engine
https://splits.io
GNU Affero General Public License v3.0
133 stars 27 forks source link

LiveSplit files are not properly escaped #73

Open CryZe opened 9 years ago

CryZe commented 9 years ago

The < and > signs need to be escaped in XML, which they are when uploading, but when downloading them again, they are not escaped anymore. Example file

There's probably a lot of other things that are escaped, so you shouldn't just do a replace on < and >.

CryZe commented 7 years ago

Doesn't seem to apply to LiveSplit files anymore, but it seems to affect other formats like the JSON result from the API.