Public bug reported:

looks like ../lib/class/xml_data.class.php is used for generate xml-api
output

line 484 contains:
  "\t<composer>" . $song->composer . "</composer>\n" .

This leads to a xml-parsing error, if there's a composer with a '&' in
the composer-name

A CDATA-escaping should fix the bug:

   "\t<composer><![CDATA[" . $song->composer . "]]></composer>\n" .

** Affects: ampache (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1666367

Title:
  Missing CDATA on xml_data.class.php

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ampache/+bug/1666367/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to