Escape again

Author: maiertech

src/routes/api/notes/rss/+server.ts

@@ -3,6 +3,7 @@ import type { RssItem } from '$lib/types';
 import type { NoteMeta } from '@maiertech/sveltekit-helpers';
 import { json } from '@sveltejs/kit';
 import type { RequestHandler } from './$types';
+import { escapeXml } from '$lib/utils/escapeXml';
 
 export const prerender = true;
 
@@ -19,7 +20,7 @@ export const GET: RequestHandler = async ({ fetch }) => {
 		category: 'Note',
 		enclosure: note.ogImageUrl
 			? {
-					url: note.ogImageUrl,
+					url: escapeXml(note.ogImageUrl),
 					type: 'image/png',
 					length: 0 // We don't know the size of the image.
 				}

src/routes/api/posts/rss/+server.ts

@@ -3,6 +3,7 @@ import type { RssItem } from '$lib/types';
 import type { ResolvedPost } from '@maiertech/sveltekit-helpers';
 import { json } from '@sveltejs/kit';
 import type { RequestHandler } from './$types';
+import { escapeXml } from '$lib/utils/escapeXml';
 
 export const prerender = true;
 
@@ -19,7 +20,7 @@ export const GET: RequestHandler = async ({ fetch }) => {
 		category: 'Post',
 		enclosure: post.ogImageUrl
 			? {
-					url: post.ogImageUrl,
+					url: escapeXml(post.ogImageUrl),
 					type: 'image/png',
 					length: 0 // We don't know the size of the image.
 				}

src/routes/notes/rss.xml/+server.ts

@@ -26,7 +26,7 @@ export const GET: RequestHandler = async ({ fetch }) => {
         <description>${item.description}</description>
         <link>${item.link}</link>
         <pubDate>${item.pubDate}</pubDate>
-        ${item.enclosure ? `<![CDATA[<enclosure url="${item.enclosure.url}" length="${item.enclosure.length}" type="${item.enclosure.type}" />]]>` : ''}
+        ${item.enclosure ? `<enclosure url="${item.enclosure.url}" length="${item.enclosure.length}" type="${item.enclosure.type}"></enclosure>` : ''}
         <guid>${item.link}</guid>
       </item>
     `

src/routes/posts/rss.xml/+server.ts

@@ -26,7 +26,7 @@ export const GET: RequestHandler = async ({ fetch }) => {
         <description>${item.description}</description>
         <link>${item.link}</link>
         <pubDate>${item.pubDate}</pubDate>
-        ${item.enclosure ? `<![CDATA[<enclosure url="${item.enclosure.url}" length="${item.enclosure.length}" type="${item.enclosure.type}" />]]>` : ''}
+        ${item.enclosure ? `<enclosure url="${item.enclosure.url}" length="${item.enclosure.length}" type="${item.enclosure.type}"></enclosure>` : ''}
         <guid>${item.link}</guid>
       </item>
     `