From da1cf5ed9c10a96ef6da0840619d2c178fb2827b Mon Sep 17 00:00:00 2001
From: Martin Hawlisch <loshawlos@users.sourceforge.net>
Date: Tue, 12 Dec 2006 12:01:41 +0000
Subject: [PATCH] * src/GrampsDb/_WriteXML.py: Escape XML special chars

svn: r7788
---
 gramps2/ChangeLog                 | 1 +
 gramps2/src/GrampsDb/_WriteXML.py | 8 ++++----
 2 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/gramps2/ChangeLog b/gramps2/ChangeLog
index ac6c372e4..5ab544423 100644
--- a/gramps2/ChangeLog
+++ b/gramps2/ChangeLog
@@ -5,6 +5,7 @@
 	* src/DataViews/_PedigreeView.py: Escape XML special chars
 	* src/plugins/TestcaseGenerator.py: Create media note object;
 	Randomize URL
+	* src/GrampsDb/_WriteXML.py: Escape XML special chars
 
 2006-12-11  Don Allingham  <don@gramps-project.org>
 	* src/Editors/_EditMedia.py: fix menu title (bug#755)
diff --git a/gramps2/src/GrampsDb/_WriteXML.py b/gramps2/src/GrampsDb/_WriteXML.py
index 882238929..131da64d5 100644
--- a/gramps2/src/GrampsDb/_WriteXML.py
+++ b/gramps2/src/GrampsDb/_WriteXML.py
@@ -526,7 +526,7 @@ class XmlWriter(UpdateCallback):
             return
         sp = "  "*index
         priv_text = conf_priv(personref)
-        rel_text = ' rel="%s"' % personref.get_relation()
+        rel_text = ' rel="%s"' % escxml(personref.get_relation())
 
         sreflist = personref.get_source_references()
         if (len(sreflist) == 0) and personref.get_note() =="":
@@ -697,9 +697,9 @@ class XmlWriter(UpdateCallback):
         g = name.get_group_as()
         self.g.write('%s<last' % ('  '*indent))
         if p:
-            self.g.write(' prefix="%s"' % p)
+            self.g.write(' prefix="%s"' % escxml(p))
         if g:
-            self.g.write(' group="%s"' % g)
+            self.g.write(' group="%s"' % escxml(g))
         self.g.write('>%s</last>\n' % self.fix(n))
 
     def write_line(self,tagname,value,indent=1):
@@ -927,7 +927,7 @@ class XmlWriter(UpdateCallback):
             if reporef.call_number == "":
                 callno_text = ''
             else:
-                callno_text = ' callno="%s"' % reporef.call_number
+                callno_text = ' callno="%s"' % escxml(reporef.call_number)
                 
             mtype = reporef.media_type.xml_str()
             if mtype: