From b84185ea4ee3af7047d2b2c4b8e2e2216e2d9d2c Mon Sep 17 00:00:00 2001
From: Ethan Dalool <git@voussoir.net>
Date: Thu, 30 Nov 2023 17:41:21 -0800
Subject: [PATCH] Escape ampersands and angle brackets from track title in GPX.

---
 app/src/main/java/net/voussoir/trkpt/Track.kt | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/app/src/main/java/net/voussoir/trkpt/Track.kt b/app/src/main/java/net/voussoir/trkpt/Track.kt
index 5e0e474..96b668e 100644
--- a/app/src/main/java/net/voussoir/trkpt/Track.kt
+++ b/app/src/main/java/net/voussoir/trkpt/Track.kt
@@ -97,8 +97,9 @@ data class Track (
             xsi:schemaLocation="http://www.topografix.com/GPX/1/1 http://www.topografix.com/GPX/1/1/gpx.xsd"
         >
         """.trimIndent())
+        val name_escaped = this.name.replace("&", "&amp;").replace("<", "&lt;").replace(">", "&gt;")
         write("\t<metadata>")
-        write("\t\t<name>${this.name}</name>")
+        write("\t\t<name>${name_escaped}</name>")
         write("\t\t<application>${BuildConfig.APPLICATION_ID} ${BuildConfig.VERSION_NAME}</application>")
         write("\t\t<device>${this.device_id}</device>")
         write("\t</metadata>")