From 233f424dfc4c106326f7875d4bdf1c17399c1608 Mon Sep 17 00:00:00 2001
From: Roland Hieber <rohieb@rohieb.name>
Date: Fri, 22 Jul 2016 06:51:30 +0200
Subject: [PATCH 1/1] task: proper XML escaping in notification

---
 widgets/contrib/task.lua | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/widgets/contrib/task.lua b/widgets/contrib/task.lua
index f721548..98817f9 100644
--- a/widgets/contrib/task.lua
+++ b/widgets/contrib/task.lua
@@ -52,7 +52,7 @@ function task:show(scr_pos)
     c_text = "<span font='"
              .. task.font .. " "
              .. task.font_size .. "'>"
-             .. f:read("*all"):gsub("\n*$", "")
+             .. awful.util.escape(f:read("*all"):gsub("\n*$", ""))
              .. "</span>"
     f:close()
 
@@ -75,7 +75,7 @@ function task:prompt_add()
           c_text = "\n<span font='"
                    .. task.font .. " "
                    .. task.font_size .. "'>"
-                   .. f:read("*all")
+                   .. awful.util.escape(f:read("*all"))
                    .. "</span>"
           f:close()
 
@@ -107,7 +107,7 @@ function task:prompt_search()
               c_text = "<span font='"
                        .. task.font .. " "
                        .. task.font_size .. "'>"
-                       .. c_text
+                       .. awful.util.escape(c_text)
                        .. "</span>"
           end
 
-- 
2.39.5