fixed error message to escape xml entities

RocketMan · Oct 10, 2022 · 23ea346 · 23ea346
1 parent 8c52555
commit 23ea346
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/controllers/RSS.php b/controllers/RSS.php
@@ -336,7 +336,7 @@ public function recentAdds() {
     }
 
     public function emitError() {
-       $message = "Invalid feed: ".$_REQUEST["feed"];
+       $message = "Invalid feed: ".self::xmlentities($_REQUEST["feed"]);
        echo "<channel>\n<title>$message</title>\n<link>".Engine::getBaseUrl()."</link>\n<description>$message</description>\n</channel>\n";
     }
 }