Index: notifier/rss.c
===================================================================
--- notifier/rss.c	(revision 7446)
+++ notifier/rss.c	(working copy)
@@ -579,6 +579,7 @@
   FILE		*fp;			/* File pointer */
   _cups_rss_t	*msg;			/* Current message */
   char		date[1024];		/* Current date */
+  char		*href;			/* Escaped base URL */
 
 
   if ((fp = fopen(filename, "w")) == NULL)
@@ -592,7 +593,11 @@
   fputs("<rss version=\"2.0\">\n", fp);
   fputs("  <channel>\n", fp);
   fputs("    <title>CUPS RSS Feed</title>\n", fp);
-  fprintf(fp, "    <link>%s</link>\n", baseurl);
+
+  href = xml_escape(baseurl);
+  fprintf(fp, "    <link>%s</link>\n", href);
+  free(href);
+
   fputs("    <description>CUPS RSS Feed</description>\n", fp);
   fputs("    <generator>" CUPS_SVERSION "</generator>\n", fp);
   fputs("    <ttl>1</ttl>\n", fp);