rss/newpkg.tmpl: HTML escape package description

Reported by Andreas Juch <andreas.juch -at- tele2 at>

diff --git a/templates/rss/newpkg.tmpl b/templates/rss/newpkg.tmpl
index 4735c4423848e97611f919f8e3dc595f26e79c49..1137d4f6ad5121bbe13573f3f421ef3abcbce5cf 100644 (file)
--- a/templates/rss/newpkg.tmpl
+++ b/templates/rss/newpkg.tmpl
@@ -47,7 +47,7 @@
 <item rdf:about="[% root_url _ pkg.0 %]">
 <title>[% pkg.0 %]</title>
 <link>[% root_url _ pkg.0 %]</link>
-<description>[% pkg.-1 %]</description>
+<description>[% pkg.-1 | html %]</description>
 <dc:subject>[% pkg.6 %]</dc:subject>
 </item>
 [% END -%]