Escape release notes when generating package.xml

ExportXMLWordPrintableJSON

    • Type: Bug
    • Resolution: Fixed
    • Priority: Major - P3
    • 2.4.0
    • Affects Version/s: None
    • Component/s: None
    • None
    • 1
    • None
    • PHP Drivers
    • Not Needed
    • None
    • None
    • None
    • None
    • None
    • None

      The release notes file passed to bin/prep-release.php is spliced verbatim into the <notes> element of package.xml via str_replace. Any XML metacharacter in the notes breaks the manifest. Escape the content with htmlspecialchars(..., ENT_XML1 | ENT_QUOTES, 'UTF-8') before splicing.

            Assignee:
            Jérôme Tamarelle
            Reporter:
            Jérôme Tamarelle
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: