Add HTML escaping to metadata publishing script.

[mlt] / src / swig / ruby / metadata.rb

diff --git a/src/swig/ruby/metadata.rb b/src/swig/ruby/metadata.rb
index 9559b96aabc8af7ee0af350700acd9256dfcb887..87b4d8faccdf6d05525f9162aa400fe499dbd88e 100755 (executable)
--- a/src/swig/ruby/metadata.rb
+++ b/src/swig/ruby/metadata.rb
@@ -27,7 +27,7 @@ media types:
 %   end
 %%BR%
 % end
-description: <%= yml['description'] %> %BR%
+description: <%= ERB::Util.h(yml['description']) %> %BR%
 version: <%= yml['version'] %> %BR%
 creator: <%= yml['creator'] %> %BR%
 % yml['contributor'] and yml['contributor'].each do |x|
@@ -39,7 +39,7 @@ contributor: <%= x %> %BR%
 % if yml['notes']
 ---++ Notes
 %   yml['notes'].each do |x|
-<%= x %>
+<%= ERB::Util.h(x) %>
 %   end
 % end
 
@@ -55,7 +55,7 @@ contributor: <%= x %> %BR%
 %   yml['parameters'].each do |param|
 ---+++ <%= param['identifier'] %>
 <%= "title: #{param['title']} %BR%\n" if param['title'] %>
-<%= "description: #{param['description']} %BR%\n" if param['description'] %>
+<%= "description: #{ERB::Util.h(param['description'])} %BR%\n" if param['description'] %>
 type: <%= param['type'] %> %BR%
 readonly: <%= param['readonly'] or 'no' %> %BR%
 required: <%= param['required'] or 'no' %> %BR%
@@ -91,15 +91,19 @@ def output(mlt_type, services, type_title)
     if meta.is_valid
       filename = type_title + name.capitalize.gsub('.', '-')
       puts "Processing #{filename}"
-      yml = YAML.load(meta.serialise_yaml)
-      if yml
-        File.open(filename + '.txt', 'w') do |f|
-          f.puts $processor.result(binding)
+      begin
+        yml = YAML.load(meta.serialise_yaml)
+        if yml
+          File.open(filename + '.txt', 'w') do |f|
+            f.puts $processor.result(binding)
+          end
+        else
+          puts "Failed to write file for #{filename}"
         end
-      else
-        puts "Failed to write file for #{filename}"
+        index.puts "   * [[#{filename}][#{name}]]: #{meta.get('title')}\n"
+      rescue ArgumentError
+          puts "Failed to parse YAML for #{filename}"
       end
-      index.puts "   * [[#{filename}][#{name}]]: #{meta.get('title')}\n"
     end
   end 
   index.puts '</noautolink>'