CGI::escaping for proper, good juju activity streams

.gitignore

@@ -42,3 +42,4 @@ bin/*
 nbproject
 patches-*
 capybara-*.html
+dump.rdb

app/models/status_message.rb

@@ -24,7 +24,7 @@ class StatusMessage < Post
   def to_activity
     <<-XML
   <entry>
-    <title>#{self.message}</title>
+    <title>#{CGI::escape(self.message)}</title>
     <link rel="alternate" type="text/html" href="#{person.url}status_messages/#{self.id}"/>
     <id>#{person.url}status_messages/#{self.id}</id>
     <published>#{self.created_at.xmlschema}</published>

lib/diaspora/ostatus_builder.rb

@@ -33,7 +33,7 @@ module Diaspora
 <subtitle>Posts from Diaspora</subtitle>
 <updated>#{Time.now.xmlschema}</updated>
 <author>
-  <name>#{@user.name}</name>
+  <name>#{CGI::escape(@user.name)}</name>
   <uri>#{@user.public_url}</uri>
 </author>
       XML