From 9f7f390873b8ac52472f6d17ec18ecf00498d6cc Mon Sep 17 00:00:00 2001
From: Filippo Giunchedi <filippo@esaurito.net>
Date: Fri, 27 Mar 2009 20:09:43 +0100
Subject: [PATCH] html entity escape for Maintainer/Description/Changes

---
 tools/queue_rss.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/tools/queue_rss.py b/tools/queue_rss.py
index ce72d65a..fb56e189 100755
--- a/tools/queue_rss.py
+++ b/tools/queue_rss.py
@@ -5,6 +5,7 @@
 # Author: Filippo Giunchedi <filippo@debian.org>
 # Version: 0.4
 
+import cgi
 import os
 import os.path
 import cPickle
@@ -110,14 +111,14 @@ def add_rss_item(status, msg, direction):
         return False
 
     description = "<pre>Description: %s\nChanges: %s\n</pre>" % \
-            (utf2ascii(msg['Description']), utf2ascii(msg['Changes']))
+            (utf2ascii(cgi.escape(msg['Description'])), utf2ascii(cgi.escape(msg['Changes'])))
 
     feed.items.insert(0,
         PyRSS2Gen.RSSItem(
             title,
             pubDate = pubdate,
             description = description,
-            author = utf2ascii(msg['Maintainer']),
+            author = utf2ascii(cgi.escape(msg['Maintainer'])),
             link = "http://ftp-master.debian.org/new/%s_%s.html" % \
                     (msg['Source'], msg['Version'])
         )
-- 
2.39.2