Ticket #899: forum-rss-fix.diff

html/user/forum_rss.php

@@ -122 +122 @@
     <title>".strip_tags($thread->title)."</title>
     <link>$unique_url</link>
     <guid isPermaLink=\"true\">$unique_url</guid>
-    <description>".substr(strip_tags($post->content),0,255)." . . .</description>
+    <description>".htmlspecialchars(htmlspecialchars(substr($post->content,0,255)))." . . .</description>
     <pubDate>$post_date</pubDate>
 </item>
 ";