html escaping for waypoint map popups

2013-03-15 16:59:55 +01:00
parent a15b558275
commit f850b3372b
1 changed files with 1 additions and 1 deletions
@@ -347,7 +347,7 @@ function output_cachexml($sWaypoint)
 		echo 'imagewidth="38" imageheight="38" ';
 		echo 'latitude="' . xmlentities($waypoint['latitude']) . '" ';
 		echo 'longitude="' . xmlentities($waypoint['longitude']) . '" ';
-		echo 'description="' . xmlentities(mb_ereg_replace('\r\n','<br />',$waypoint['description'])) . '" />\n';
+		echo 'description="' . xmlentities(mb_ereg_replace('\r\n','<br />',htmlentities($waypoint['description'],ENT_NOQUOTES,'UTF-8'))) . '" />\n';
 	}

 	echo '  </cache>\n';