Encode special characters in commit messages for package.xml

mongodb · Dec 22, 2015 · 36dc63a · 36dc63a
1 parent 371d990
commit 36dc63a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/bin/prep-release.php b/bin/prep-release.php
@@ -194,7 +194,7 @@ function usage() {
 $fullnotes = file($changelog, FILE_IGNORE_NEW_LINES|FILE_SKIP_EMPTY_LINES);
 $NOTES = array();
 foreach($fullnotes as $note) {
-    $note = "    " . str_replace("&", "&amp;", trim($note));
+    $note = "    " . htmlspecialchars(trim($note), ENT_NOQUOTES);
     /* PHP PHPC JIRA Project */
     if (strstr($note, "PHPC-") !== false) {
         $NOTES[] = $note;