From 7e060aa08a5ae47532a000e836e01d77534160f9 Mon Sep 17 00:00:00 2001
From: David Anderson <davea@ssl.berkeley.edu>
Date: Tue, 20 Jul 2010 00:27:37 +0000
Subject: [PATCH] - client: entity-encode client-generated notices     (e.g.
 they may contain XML tags)

svn path=/trunk/boinc/; revision=22010
---
 checkin_notes          | 8 ++++++++
 client/client_msgs.cpp | 4 +++-
 2 files changed, 11 insertions(+), 1 deletion(-)

diff --git a/checkin_notes b/checkin_notes
index b3e068e515..2f7ce21d3b 100644
--- a/checkin_notes
+++ b/checkin_notes
@@ -5259,3 +5259,11 @@ Rom    19 July 2010
     win_build/installerv2/redist/Windows/x64/
         boinccas.dll
         boinccas95.dll
+
+David  19 Jul 2010
+    - client: entity-encode client-generated notices
+        (e.g. they may contain XML tags)
+
+    client/
+        client_msgs.cpp
+
diff --git a/client/client_msgs.cpp b/client/client_msgs.cpp
index 1fb5af1ade..a983ac7123 100644
--- a/client/client_msgs.cpp
+++ b/client/client_msgs.cpp
@@ -81,8 +81,10 @@ void MESSAGE_DESCS::insert(PROJECT* p, int priority, int now, char* message) {
 
 #ifndef SIM
     if (priority == MSG_USER_ALERT) {
+        char buf[1024];
+        xml_escape(message, buf, 1024);
         NOTICE n;
-        n.description = message;
+        n.description = buf;
         if (p) {
             strcpy(n.project_name, p->get_project_name());
         }