From 5c250fc28acd0ab181b74623df2aa95fff53e716 Mon Sep 17 00:00:00 2001 From: Robbt Date: Wed, 24 Apr 2019 22:19:45 -0400 Subject: [PATCH] added additional escapes to fix podcast service --- airtime_mvc/application/services/PodcastService.php | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/airtime_mvc/application/services/PodcastService.php b/airtime_mvc/application/services/PodcastService.php index 0855e5743..d9362ebde 100644 --- a/airtime_mvc/application/services/PodcastService.php +++ b/airtime_mvc/application/services/PodcastService.php @@ -412,7 +412,9 @@ class Application_Service_PodcastService if (empty($value)) { return null; } - $child = $node->addChild($name, $value, $namespace); + $child = $node->addChild($name, null, $namespace); + Logging::info($value); + $child[0] = $value; return $child; } @@ -444,7 +446,7 @@ class Application_Service_PodcastService $imageUrl = Application_Common_HTTPHelper::getStationUrl()."api/station-logo"; $image = $channel->addChild("image"); - $image->addChild("title", $podcast->getDbTitle()); + $image->addChild("title", htmlspecialchars($podcast->getDbTitle())); self::addEscapedChild($image, "url", $imageUrl); self::addEscapedChild($image, "link", Application_Common_HTTPHelper::getStationUrl());