diff --git a/lib/Formatter.php b/lib/Formatter.php index 5878aa2e..3a14292a 100644 --- a/lib/Formatter.php +++ b/lib/Formatter.php @@ -83,7 +83,7 @@ class Formatter{ } /** - * Escape a strin so that it's safe to output directly into an XML document. Note that this is **not the same** as escaping for HTML. Any query strings in URLs should already be URL-encoded, for example `?foo=bar+baz&x=y`. + * Escape a string so that it's safe to output directly into an XML document. Note that this is **not the same** as escaping for HTML. Any query strings in URLs should already be URL-encoded, for example `?foo=bar+baz&x=y`. */ public static function EscapeXml(?string $text): string{ return htmlspecialchars(trim($text ?? ''), ENT_QUOTES|ENT_XML1, 'utf-8'); diff --git a/templates/WantedEbooksList.php b/templates/WantedEbooksList.php index 0a2f06f8..d8ba78f7 100644 --- a/templates/WantedEbooksList.php +++ b/templates/WantedEbooksList.php @@ -8,7 +8,7 @@ foreach($ebooks as $ebook){ ?>
- if(isset($ebook->EbookPlaceholder->TranscriptionUrl)){ ?> } ?>= Formatter::EscapeHtml($ebook->Title) ?> if(isset($ebook->EbookPlaceholder->TranscriptionUrl)){ ?> } ?> + if(isset($ebook->EbookPlaceholder->TranscriptionUrl)){ ?> } ?>= Formatter::EscapeHtml($ebook->Title) ?> if(isset($ebook->EbookPlaceholder->TranscriptionUrl)){ ?> } ?> by = Formatter::EscapeHtml($ebook->AuthorsString) ?>. = $ebook->ContributorsHtml ?>