escape feed title in generated feed

[tt-rss.git] / functions.php

diff --git a/functions.php b/functions.php
index 5fd65c1d6f93c0bc89dcf551f8b760454c22914d..a58613ccb7d63f5fb2bada6d8a04d98d79e7540c 100644 (file)
--- a/functions.php
+++ b/functions.php
@@ -2224,7 +2224,7 @@
                                30, false, $is_cat, $search, $search_mode, $match_on);
 
                $result = $qfh_ret[0];
-               $feed_title = $qfh_ret[1];
+               $feed_title = htmlspecialchars($qfh_ret[1]);
                $feed_site_url = $qfh_ret[2];
                $last_error = $qfh_ret[3];