RSS feed defined with a

mimetype(“application/rss+xml”)

outputs XML. The & character is not escaped in output this context, breaking the XML.

Submitted by Eelco Visser on 12 May 2011 at 15:36

Log in to post comments