From: Radek Czajka <rczajka@rczajka.pl>
Date: Tue, 3 Nov 2026 12:43:36 +0000 (+0100)
Subject: Escape titles for catalogue in PDF.
X-Git-Url: https://git.mdrn.pl/wolnelektury.git/commitdiff_plain/768a92ae834b6d6f19d8e041ca39153e0e604a27?ds=inline

Escape titles for catalogue in PDF.
---

diff --git a/src/catalogue/templatetags/catalogue_tags.py b/src/catalogue/templatetags/catalogue_tags.py
index e50ab5817..29019755d 100644
--- a/src/catalogue/templatetags/catalogue_tags.py
+++ b/src/catalogue/templatetags/catalogue_tags.py
@@ -164,7 +164,7 @@ def book_tree_texml(book_list, books_by_parent, depth=1):
             %(children)s
             """ % {
                 "depth": depth,
-                "title": book.title,
+                "title": book.title.replace('&', '&amp;').replace('<', '&lt;'),
                 "audiences": ", ".join(book.audiences_pl()),
                 "audiobook": "audiobook" if book.has_media('mp3') else "",
                 "children": book_tree_texml(books_by_parent.get(book.id, ()), books_by_parent, depth + 1)