From 42bed9049a160f907032c3833bf3eecec08e678d Mon Sep 17 00:00:00 2001
From: acouch acinternets@gmail.com
Date: Fri, 25 Feb 2011 23:56:58 -0500
Subject: [PATCH] #1064248 escaping values in xnl_validate

---
 addressfield.module |    6 ++++++
 1 files changed, 6 insertions(+), 0 deletions(-)

diff --git a/addressfield.module b/addressfield.module
index 55b8c05..9492b26 100644
--- a/addressfield.module
+++ b/addressfield.module
@@ -472,10 +472,16 @@ function addressfield_standard_xnl_validate($element, &$form_state) {
   // Find the xNL element's sibling element values to construct the XML.
   $values = $form_state['values'];
 
   foreach (array_diff($element['#parents'], array('xnl')) as $key) {
     $values = $values[$key];
   }
 
+  // Escape values for SimpleXMLElement.
+  foreach ($values as $key => $value) {
+    $values[$key] = check_plain($value);
+  }
+
   // Create the basic NameDetails element that holds the name data.
   $name_details = new SimpleXMLElement('<NameDetails></NameDetails>');
 
-- 
1.7.0.4