From: William Pitcock <nenolod@dereferenced.org>
Date: Sun, 12 May 2019 19:04:37 +0000 (+0000)
Subject: xml builder: properly escape quotes
X-Git-Url: http://git.squeep.com/?a=commitdiff_plain;h=80759f012eb2183bc24f84c4a1f2a5dbe94762ce;p=akkoma

xml builder: properly escape quotes
---

diff --git a/lib/xml_builder.ex b/lib/xml_builder.ex
index 88f8ce2a3..b58602c7b 100644
--- a/lib/xml_builder.ex
+++ b/lib/xml_builder.ex
@@ -35,6 +35,7 @@ defmodule Pleroma.XmlBuilder do
   defp make_open_tag(tag, attributes) do
     attributes_string =
       for {attribute, value} <- attributes do
+        value = String.replace(value, "\"", "&quot;")
         "#{attribute}=\"#{value}\""
       end
       |> Enum.join(" ")