From 55ef85adc01474f502cf195d8fb35e2655ccd20a Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Wed, 26 Dec 2018 10:16:11 +0300
Subject: parser: clean() attribute values by default (except content)

---
 classes/feedparser.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'classes/feedparser.php')

diff --git a/classes/feedparser.php b/classes/feedparser.php
index a5e406149..dc67e204e 100644
--- a/classes/feedparser.php
+++ b/classes/feedparser.php
@@ -246,11 +246,11 @@ class FeedParser {
 	}
 
 	function get_link() {
-		return $this->link;
+		return clean($this->link);
 	}
 
 	function get_title() {
-		return $this->title;
+		return clean($this->title);
 	}
 
 	function get_items() {
@@ -266,7 +266,7 @@ class FeedParser {
 
 			foreach ($links as $link) {
 				if (!$rel || $link->hasAttribute('rel') && $link->getAttribute('rel') == $rel) {
-					array_push($rv, trim($link->getAttribute('href')));
+					array_push($rv, clean(trim($link->getAttribute('href'))));
 				}
 			}
 			break;
@@ -275,7 +275,7 @@ class FeedParser {
 
 			foreach ($links as $link) {
 				if (!$rel || $link->hasAttribute('rel') && $link->getAttribute('rel') == $rel) {
-					array_push($rv, trim($link->getAttribute('href')));
+					array_push($rv, clean(trim($link->getAttribute('href'))));
 				}
 			}
 			break;
-- 
cgit v1.2.3-54-g00ecf