Fixed html escape characters in Feeds

diff --git a/sid/feeds.py b/sid/feeds.py
index ae07005b9c268dcefa49e56db6d6f597811637b9..b3dd19f43147d857cd8f68930e4f3ef998c521e3 100644 (file)
--- a/sid/feeds.py
+++ b/sid/feeds.py
@@ -161,9 +161,11 @@ class Feeds(Plugin):
         if 'last' in args:
             self.send('Last feeds check: %s' % self.th_mon.last_check)
             return
-        html = ['<a href="{0}">{1}</a>'.format(u, u[7:]) for u in Feeds.FEEDS]
+        html = ['<a href="{0}">{1}</a>'.format(html_escape(u),
+                                               html_escape(u[7:])
+                                               ) for u in Feeds.FEEDS]
         msg = {
                 'mbody': 'Feeds:\n' + '\n'.join(Feeds.FEEDS),
-                'mhtml': 'Feeds:<br />' + '<br />'.join(html)
+                'mhtml': 'Feeds:<br />' + '<br />'.join(html),
                 }
         self.send(msg)