From e964490a9a4b082546e6db7ff50c81d2b8cabb9b Mon Sep 17 00:00:00 2001
From: Raphael Sofaer <raphael@joindiaspora.com>
Date: Wed, 23 Feb 2011 15:59:10 -0800
Subject: [PATCH] Escape xml before dispatch

---
 app/models/jobs/http_multi.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/models/jobs/http_multi.rb b/app/models/jobs/http_multi.rb
index b45c9438a..b4844cca3 100644
--- a/app/models/jobs/http_multi.rb
+++ b/app/models/jobs/http_multi.rb
@@ -19,7 +19,7 @@ module Job
         url = person.receive_url
         xml = salmon.xml_for(person)
 
-        request = Typhoeus::Request.new(url, OPTS.merge(:params => {:xml => xml}))
+        request = Typhoeus::Request.new(url, OPTS.merge(:params => {:xml => CGI::escape(xml)}))
 
         request.on_complete do |response|
           unless response.success?