escaping

defunkt · Jan 22, 2008 · 868ddb7 · 868ddb7
1 parent dbd59d5
commit 868ddb7
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/subtle.rb b/subtle.rb
@@ -166,13 +166,17 @@ def render_atom_feed(item)
   `rm #{tmp_file}`
 
   if err = stderr.read
-    erb %(<h3>Error Atomizing #{item.url}:</h3><p>#{err.gsub("\n", '<br/>')}</p>)
+    erb %(<h3>Error Atomizing #{item.url}:</h3><p>#{h(err).gsub("\n", '<br/>')}</p>)
   else
     File.open(@file, 'w') { |f| f.puts stdout.read }
     sendfile @file
   end
 end
 
+def h(text)
+  ERB::Util.h(text)
+end
+
 def xml!
   @headers['Content-Type'] = 'application/xml'
 end
@@ -283,4 +287,3 @@ def footer
   </html>
   end_html
 end
-