Fix bad escaping of < and >, fix kaetemi/ryzomclassic#150

4 years ago · 8594b479e2
parent fbab39451f
commit 8594b479e2
1 changed files with 2 additions and 2 deletions
--- a/ryzom/common/data_common/r2/r2_misc.lua
+++ b/ryzom/common/data_common/r2/r2_misc.lua
@ -191,9 +191,9 @@ end
 -------------------------------------------------------------------------------------------------
 -- enclose a string by double quotes
 function strifyXml(str)
-	local strxml = string.gsub(tostring(str), ">", "&gt;")
+	local strxml = string.gsub(tostring(str), "&", "&amp;")
 	strxml = string.gsub(strxml, "<", "&lt;")
-	strxml = string.gsub(strxml, "&", "&amp;")
+	strxml = string.gsub(strxml, ">", "&gt;")
 	strxml = string.gsub(strxml, "'", "&apos;")
 	strxml = string.gsub(strxml, '"', "&quot;")
 	return [["]] .. strxml .. [["]]