From 6b4f867b7fb3706c4599ca636a2155de1fc1fc05 Mon Sep 17 00:00:00 2001
From: test <youxiang@qq.com>
Date: Fri, 12 Sep 2025 08:23:14 +0800
Subject: [PATCH] =?UTF-8?q?=E8=8A=82=E7=9B=AE=E5=8D=95=E7=89=B9=E6=AE=8A?=
 =?UTF-8?q?=E5=AD=97=E7=AC=A6=E8=BD=AC=E4=B9=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 utils/playback.js | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/utils/playback.js b/utils/playback.js
index 24b606d..1c66813 100644
--- a/utils/playback.js
+++ b/utils/playback.js
@@ -25,9 +25,12 @@ async function updatePlaybackData(program, filePath) {
 
   // 写入节目信息
   for (let i = 0; i < playbackData.length; i++) {
+    // 特殊字符转义
+    const contName = playbackData[i].contName.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("\"", "&quot;").replaceAll("'", "&apos;");
+
     appendFileSync(filePath,
       `    <programme channel="${program.name}" start="${getDateTimeString(new Date(playbackData[i].startTime))} +0800" stop="${getDateTimeString(new Date(playbackData[i].endTime))} +0800">\n` +
-      `        <title lang="zh">${playbackData[i].contName}</title>\n` +
+      `        <title lang="zh">${contName}</title>\n` +
       `    </programme>\n`
     )
   }