- web: escape forum RSS entries instead of stripping tags

(from Nicolas; fixes #899)

svn path=/trunk/boinc/; revision=18190

checkin_notes

@@ -4707,3 +4707,9 @@ Rom    20 May 2009
         configure.ac
         version.h
     
+David  22 May 2009
+    - web: escape forum RSS entries instead of stripping tags
+        (from Nicolas; fixes #899)
+
+    html/user/
+        forum_rss.php

html/user/forum_rss.php

@@ -122,7 +122,7 @@ foreach ($threads as $thread) {
     <title>".strip_tags($thread->title)."</title>
     <link>$unique_url</link>
     <guid isPermaLink=\"true\">$unique_url</guid>
-    <description>".substr(strip_tags($post->content),0,255)." . . .</description>
+    <description>".htmlspecialchars(htmlspecialchars(substr($post->content,0,255)))." . . .</description>
     <pubDate>$post_date</pubDate>
 </item>
 ";