fix #1852

liyboy · Oct 8, 2024 · c438ccb · c438ccb
1 parent d7c09e2
commit c438ccb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/radicale/web/internal_data/fn.js b/radicale/web/internal_data/fn.js
@@ -395,7 +395,7 @@ function create_edit_collection(user, password, collection, create, callback) {
         calendar_color = escape_xml(collection.color + (collection.color ? "ff" : ""));
         calendar_description = escape_xml(collection.description);
         resourcetype = '<CS:subscribed />';
-        calendar_source = collection.source;
+        calendar_source = escape_xml(collection.source);
     } else {
         calendar_color = escape_xml(collection.color + (collection.color ? "ff" : ""));
         calendar_description = escape_xml(collection.description);