From: Roland Hieber <rohieb@rohieb.name>
Date: Fri, 22 Jul 2016 04:51:30 +0000 (+0200)
Subject: task: proper XML escaping in notification
X-Git-Url: https://git.madduck.net/etc/awesome.git/commitdiff_plain/233f424dfc4c106326f7875d4bdf1c17399c1608?ds=sidebyside

task: proper XML escaping in notification
---

diff --git a/widgets/contrib/task.lua b/widgets/contrib/task.lua
index f721548..98817f9 100644
--- a/widgets/contrib/task.lua
+++ b/widgets/contrib/task.lua
@@ -52,7 +52,7 @@ function task:show(scr_pos)
     c_text = "<span font='"
              .. task.font .. " "
              .. task.font_size .. "'>"
-             .. f:read("*all"):gsub("\n*$", "")
+             .. awful.util.escape(f:read("*all"):gsub("\n*$", ""))
              .. "</span>"
     f:close()
 
@@ -75,7 +75,7 @@ function task:prompt_add()
           c_text = "\n<span font='"
                    .. task.font .. " "
                    .. task.font_size .. "'>"
-                   .. f:read("*all")
+                   .. awful.util.escape(f:read("*all"))
                    .. "</span>"
           f:close()
 
@@ -107,7 +107,7 @@ function task:prompt_search()
               c_text = "<span font='"
                        .. task.font .. " "
                        .. task.font_size .. "'>"
-                       .. c_text
+                       .. awful.util.escape(c_text)
                        .. "</span>"
           end