feedlist: htmlspecialchars() feed title

diff --git a/functions.php b/functions.php
index 8f6ae89001deb4b0864e79b459fca82bc013ba5d..c89f11a1343b2ae1d8b2b7f6083cd3ccf31c7bbe 100644 (file)
--- a/functions.php
+++ b/functions.php
@@ -4261,7 +4261,7 @@
        
                        while ($line = db_fetch_assoc($result)) {
                        
-                               $feed = trim($line["title"]);
+                               $feed = htmlspecialchars(trim($line["title"]));
 
                                if (!$feed) $feed = "[Untitled]";