#1887. Escape characters which are not allowed to appear in attribute values.

2025-07-09 03:04:10 -04:00 · 2009-02-25 00:14:11 -05:00 · 2009-02-25 00:14:11 -05:00 · df4b4707a2
commit df4b4707a2
parent f1ba77d172
1 changed files with 5 additions and 2 deletions
--- a/src/calibre/ebooks/lit/reader.py
+++ b/src/calibre/ebooks/lit/reader.py
@ -276,8 +276,11 @@ class UnBinary(object):
                    state = 'get attr'
                elif count > 0:
                    if not in_censorship:
-                        self.buf.write(c.encode(
-                            'ascii', 'xmlcharrefreplace'))
+                        if c == '"':
+                            c = '&quot;'
+                        elif c == '<':
+                            c = '&lt;'
+                        self.buf.write(c.encode('ascii', 'xmlcharrefreplace'))
                    count -= 1
                if count == 0:
                    if not in_censorship: