Use xml_encode instead of htmlspecialchars

diff --git a/share/http/requests/browse.xml b/share/http/requests/browse.xml
index cc295d16483fda1c0e0f7dc7b29a51c67f610cef..e9e78f22ad4def2f9492513df321e07f89428423 100644 (file)
--- a/share/http/requests/browse.xml
+++ b/share/http/requests/browse.xml
@@ -29,7 +29,7 @@
   <vlc id="rpn" param1="'dir' url_extract" />
   <vlc id="foreach" param1="file" param2="directory" />
     <vlc id="if" param1="file.basename value '.' 1 strncmp 0 != file.basename value '..' 2 strncmp 0 = |" />
-      <element type="<vlc id="value" param1="file.type" />" size="<vlc id="value" param1="file.size" />" date="<vlc id="value" param1="file.date" />" path="<vlc id="value" param1="file.name value htmlspecialchars" />" name="<vlc id="value" param1="file.basename value htmlspecialchars" />" extension="<vlc id="value" param1="file.ext value htmlspecialchars" />" />
+      <element type="<vlc id="value" param1="file.type" />" size="<vlc id="value" param1="file.size" />" date="<vlc id="value" param1="file.date" />" path="<vlc id="value" param1="file.name value xml_encode" />" name="<vlc id="value" param1="file.basename value xml_encode" />" extension="<vlc id="value" param1="file.ext value xml_encode" />" />
     <vlc id="end" />
   <vlc id="end" />
 <vlc id="end" />

diff --git a/share/http/requests/vlm.xml b/share/http/requests/vlm.xml
index bd7804e77aac74e6469b39a7cc4c5355ba2a5865..05561cef7a0423db42c87e99801e8a6e8cbb9023 100644 (file)
--- a/share/http/requests/vlm.xml
+++ b/share/http/requests/vlm.xml
@@ -31,7 +31,7 @@
       <output><vlc id="value" param1="el.output" /></output>
       <inputs>
         <vlc id="foreach" param1="in" param2="el.inputs" />
-          <input><vlc id="value" param1="in value htmlspecialchars" /></input>
+          <input><vlc id="value" param1="in value xml_encode" /></input>
         <vlc id="end" />
       </inputs>
       <options>
@@ -51,7 +51,7 @@
         <output><vlc id="value" param1="el.output" /></output>
         <inputs>
           <vlc id="foreach" param1="in" param2="el.inputs" />
-            <input><vlc id="value" param1="in value htmlspecialchars" /></input>
+            <input><vlc id="value" param1="in value xml_encode" /></input>
           <vlc id="end" />
         </inputs>
         <options>