search

ocilo / skype-http

Unofficial Skype API for Node.js via HTTP
https://ocilo.github.io/skype-http
MIT License
51 stars 24 forks source link

Sanitize XML #48

Open demurgos opened 6 years ago

demurgos commented 6 years ago

The sendImage method uses an XML string. This string is currently built by concatenating the attributes inside the template. These attributes are not properly escaped currently.

We should either leverage cherio to build the string or add some utilities to better handle XML.