From d4fffd203144efa83c2f66a844fbbda59d22b4ad Mon Sep 17 00:00:00 2001
From: Robin Richtsfeld <robin.richtsfeld@gmail.com>
Date: Wed, 11 Jul 2018 20:14:13 +0200
Subject: Escape quotes in attributes

---
 libappstream-glib/as-node.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/libappstream-glib/as-node.c b/libappstream-glib/as-node.c
index 7036136..f0d13fc 100644
--- a/libappstream-glib/as-node.c
+++ b/libappstream-glib/as-node.c
@@ -343,6 +343,8 @@ as_node_get_attr_string (AsNodeData *data)
 		as_utils_string_replace (value_safe, "&", "&amp;");
 		as_utils_string_replace (value_safe, "<", "&lt;");
 		as_utils_string_replace (value_safe, ">", "&gt;");
+		as_utils_string_replace (value_safe, "\"", "&quot;");
+		as_utils_string_replace (value_safe, "'", "&apos;");
 		g_string_append_printf (str, " %s=\"%s\"",
 					attr->key, value_safe->str);
 	}
-- 
cgit v1.2.1