mirror of
https://github.com/svemagie/indiekit-endpoint-microsub.git
synced 2026-04-02 15:35:00 +02:00
Feedparser passes through HTML entities (“, ’, etc.) as literal strings in item titles. Nunjucks auto-escaping then double-encodes them, causing entities to render literally in the reader UI. Apply sanitizeHtml with no allowed tags to decode entities in title fields across RSS/Atom, JSON Feed, and feed metadata normalizers.