1 files changed, 2 insertions, 2 deletions
diff --git a/opml.php b/opml.php
index bcfa31700..2e87c037a 100644
--- a/opml.php
+++ b/opml.php
@@ -24,8 +24,8 @@
 		$result = db_query($link, "SELECT * FROM ttrss_feeds ORDER BY title");
 
 		while ($line = db_fetch_assoc($result)) {
-			$title = $line["title"];
-			$url = $line["feed_url"];
+			$title = htmlspecialchars($line["title"]);
+			$url = htmlspecialchars($line["feed_url"]);
 
 			print "<outline text=\"$title\" xmlUrl=\"$url\"/>";
 		}