2021-04-27 21:15:04 +00:00
1 changed files with 2 additions and 1 deletions
--- a/src/api/encoding.rs
+++ b/src/api/encoding.rs
@ -2,7 +2,8 @@

 /// Escape &str for xml inclusion
 pub fn xml_escape(s: &str) -> String {
-	s.replace("<", "&lt;")
+	s.replace("&", "&amp;")
+		.replace("<", "&lt;")
 		.replace(">", "&gt;")
 		.replace("\"", "&quot;")
 }