X-Git-Url: https://git.kaliko.me/?p=sid.git;a=blobdiff_plain;f=sid%2Ffeeds.py;h=b3dd19f43147d857cd8f68930e4f3ef998c521e3;hp=ae07005b9c268dcefa49e56db6d6f597811637b9;hb=f0c5210d24a5b4ffd71f4280fe8d40ff6ca3b742;hpb=e518fc7f4c42f6e911d85ce8f662b3d21b6da757

diff --git a/sid/feeds.py b/sid/feeds.py
index ae07005..b3dd19f 100644
--- a/sid/feeds.py
+++ b/sid/feeds.py
@@ -161,9 +161,11 @@ class Feeds(Plugin):
         if 'last' in args:
             self.send('Last feeds check: %s' % self.th_mon.last_check)
             return
-        html = ['<a href="{0}">{1}</a>'.format(u, u[7:]) for u in Feeds.FEEDS]
+        html = ['<a href="{0}">{1}</a>'.format(html_escape(u),
+                                               html_escape(u[7:])
+                                               ) for u in Feeds.FEEDS]
         msg = {
                 'mbody': 'Feeds:\n' + '\n'.join(Feeds.FEEDS),
-                'mhtml': 'Feeds:<br />' + '<br />'.join(html)
+                'mhtml': 'Feeds:<br />' + '<br />'.join(html),
                 }
         self.send(msg)