properly escape titles in rss feed

blog/rss.php

@@ -12,7 +12,7 @@
 	echo '>';
 
 	echo '<channel>';
-	echo '<title>katherine\'s blog</title>';
+	echo '<title>紀行無常 - katherine\'s blog</title>';
 	echo '<link>https://airen-no-jikken.icu/blog/</link>';
 	echo '<description>pointless blathering</description>';
 	echo '<language>en-gb</language>';
@@ -29,9 +29,9 @@
 		$content = file_get_contents($_SERVER['DOCUMENT_ROOT'] . "/blog/html/$value");
 
 		echo '<item>';
-		echo '<title>' . $title . '</title>';
+		echo '<title>' . htmlspecialchars($title) . '</title>';
 		echo '<link>' . $link . '</link>';
-		echo '<guid isPermaLink="false">' . $date . $title . '</guid>';
+		echo '<guid isPermaLink="false">' . $date . htmlspecialchars($title) . '</guid>';
 		echo '<pubDate>' . date("D, d M Y H:i:s O", strtotime($date)) . '</pubDate>';
 		echo '<content:encoded><![CDATA[' . $content . ']]></content:encoded>';
 		echo '</item>';