johansatge/workflowy-php

$list->getOPML() should be html escaped

Closed this issue · 2 comments

Otherwise it will not be possible to restore if formatting tags are used.
Right now I am doing this to backup properly:

    file_put_contents($dir . $date . '.opml.gz', gzencode(
      preg_replace_callback('/(text|_note)="(.*?)"/', function ($matches) {
        return $matches[1] . '="' . htmlspecialchars($matches[2]) . '"';
      }, $list->getOPML())
    ));

Hi,

thanks for your feedback!

I'll try to fix that soon. (Of course, feel free to open a PR if you've got some free time!)

Fixed in ec927f4.

Let me know if you still have issues.