From 0bc503ff9a74a0ca34bb21d78f4fd2aea02d3bd8 Mon Sep 17 00:00:00 2001
From: Andrew Dolgov <noreply@fakecake.org>
Date: Sat, 23 Jan 2016 02:17:24 +0300
Subject: [PATCH] update_rss_feed: escape dumped content while debugging

---
 include/rssfuncs.php | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/include/rssfuncs.php b/include/rssfuncs.php
index fcecbf670..95ac4076f 100755
--- a/include/rssfuncs.php
+++ b/include/rssfuncs.php
@@ -662,7 +662,7 @@
 
 				if ($_REQUEST["xdebug"] == 2) {
 					print "content: ";
-					print $entry_content;
+					print htmlspecialchars($entry_content);
 					print "\n";
 				}
 
@@ -771,6 +771,12 @@
 					$entry_plugin_data .= mb_strtolower(get_class($plugin)) . ",";
 				}
 
+				if ($_REQUEST["xdebug"] == 2) {
+					print "processed content: ";
+					print htmlspecialchars($article["content"]);
+					print "\n";
+				}
+
 				$entry_plugin_data = db_escape_string($entry_plugin_data);
 
 				_debug("plugin data: $entry_plugin_data", $debug_enabled);