Hi,

Yes, I found that out yesterday, however, the sharepoint is an internal box 
and the feed is an internally generated feed (I wrote), so the issue, even 
though it is there is not a problem at this point.

However, the problem stems from not being able to put certain characters 
into the RSS feed initially. I only found this out when an ampersand appeared 
which stopped the feed.

I can fix the problem on either side, but need help to do so as my XML/XSL 
is not too hot at the moment.

1. Fix the outgoing RSS so that ampersands (and other characters) don't 
break it. I used HTMLEncode. How else should I do this?

2. Fix the XSL to not re-encode the already encoded feed.

(Number 1 is written in vbscript/asp, number 2 is the sharepoint XML handler)
 
Regards,
Dave Colliver.
http://www.EastbourneFOCUS.com
~~
http://www.FOCUSPortals.com - Portal franchises available


"Julian F. Reschke" wrote:

> Hi.
> 
> You are aware that if you use disable-output-escaping, people can inject 
> arbitrary HTML/script code into your output?
> 
> Big security hole.
> 
> Best regards, Julian
>