From f0c5210d24a5b4ffd71f4280fe8d40ff6ca3b742 Mon Sep 17 00:00:00 2001
From: kaliko <kaliko@azylum.org>
Date: Sat, 15 Nov 2014 16:57:22 +0100
Subject: [PATCH] Fixed html escape characters in Feeds

---
 sid/feeds.py | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/sid/feeds.py b/sid/feeds.py
index ae07005..b3dd19f 100644
--- a/sid/feeds.py
+++ b/sid/feeds.py
@@ -161,9 +161,11 @@ class Feeds(Plugin):
         if 'last' in args:
             self.send('Last feeds check: %s' % self.th_mon.last_check)
             return
-        html = ['<a href="{0}">{1}</a>'.format(u, u[7:]) for u in Feeds.FEEDS]
+        html = ['<a href="{0}">{1}</a>'.format(html_escape(u),
+                                               html_escape(u[7:])
+                                               ) for u in Feeds.FEEDS]
         msg = {
                 'mbody': 'Feeds:\n' + '\n'.join(Feeds.FEEDS),
-                'mhtml': 'Feeds:<br />' + '<br />'.join(html)
+                'mhtml': 'Feeds:<br />' + '<br />'.join(html),
                 }
         self.send(msg)
-- 
2.39.2