[dak/master] html entity escape for Maintainer/Description/Changes

[Filippo Giunchedi <filippo@esaurito.net>]

---
 tools/queue_rss.py |    5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/tools/queue_rss.py b/tools/queue_rss.py
index ce72d65..fb56e18 100755
--- a/tools/queue_rss.py
+++ b/tools/queue_rss.py
@@ -5,6 +5,7 @@
 # Author: Filippo Giunchedi <filippo@debian.org>
 # Version: 0.4
 
+import cgi
 import os
 import os.path
 import cPickle
@@ -110,14 +111,14 @@ def add_rss_item(status, msg, direction):
         return False
 
     description = "<pre>Description: %s\nChanges: %s\n</pre>" % \
-            (utf2ascii(msg['Description']), utf2ascii(msg['Changes']))
+            (utf2ascii(cgi.escape(msg['Description'])), utf2ascii(cgi.escape(msg['Changes'])))
 
     feed.items.insert(0,
         PyRSS2Gen.RSSItem(
             title,
             pubDate = pubdate,
             description = description,
-            author = utf2ascii(msg['Maintainer']),
+            author = utf2ascii(cgi.escape(msg['Maintainer'])),
             link = "http://ftp-master.debian.org/new/%s_%s.html"; % \
                     (msg['Source'], msg['Version'])
         )
-- 
1.5.6.5