Quote all needed XML chars. See less#263.

Includes testcase.

Author: Sandro Santilli

lib/carto/tree/quoted.js

@@ -10,6 +10,9 @@ tree.Quoted.prototype = {
     toString: function(quotes) {
         var xmlvalue = this.value.replace(/&/g, '&');
         xmlvalue = xmlvalue.replace(/\'/g, ''');
+        xmlvalue = xmlvalue.replace(/\"/g, '"');
+        xmlvalue = xmlvalue.replace(/\</g, '&lt;');
+        xmlvalue = xmlvalue.replace(/\>/g, '&gt;');
         return (quotes === true) ? "'" + xmlvalue + "'" : this.value;
     },
 

test/quoted.test.js

@@ -5,19 +5,19 @@ require('../lib/carto/tree/quoted');
 describe('Quoted', function() {
     describe('basic functionality', function() {
         it('should be constructed', function() {
-            var f = new tree.Quoted("Tom's & quoted");
+            var f = new tree.Quoted("Tom's & \"<quoted>\"");
             assert.ok(f);
             assert.equal(f.is, 'string');
         });
         it('should produce normal output', function() {
-            var f = new tree.Quoted("Tom's & quoted");
+            var f = new tree.Quoted("Tom's & \"<quoted>\"");
             assert.ok(f);
-            assert.equal(f.toString(), "Tom's & quoted");
+            assert.equal(f.toString(), "Tom's & \"<quoted>\"");
         });
         it('should produce xml-friendly output', function() {
-            var f = new tree.Quoted("Tom's & quoted");
+            var f = new tree.Quoted("Tom's & \"<quoted>\"");
             assert.ok(f);
-            assert.equal(f.toString(true), "'Tom&apos;s &amp; quoted'");
+            assert.equal(f.toString(true), "'Tom&apos;s &amp; &quot;&lt;quoted&gt;&quot;'");
         });
     });
 });