diff -urp old/views_rss/views/views_plugin_style_rss_fields.inc new/views_rss/views/views_plugin_style_rss_fields.inc
--- old/views_rss/views/views_plugin_style_rss_fields.inc	2009-09-22 17:49:55.000000000 +0100
+++ new/views_rss/views/views_plugin_style_rss_fields.inc	2009-12-02 03:27:37.000000000 +0000
@@ -143,16 +143,16 @@ class views_plugin_style_rss_fields exte
             $item['title'] = $row[$key];
           }
           elseif ($key == $this->options['fields']['description']) {
-            $item['description'] = $row[$key];
+            $item['description'] = htmlentities($row[$key]);
           }
           elseif ($key == $this->options['fields']['link']) {
-            $item['link'] = $row[$key];
+            $item['link'] = strip_tags($row[$key]);
           }
           elseif ($key == $this->options['fields']['author']) {
-            $item['author'] = $row[$key];
+            $item['author'] = htmlentities($row[$key]);
           }
           elseif ($key == $this->options['fields']['category']) {
-            $item['category'] = $row[$key];
+            $item['category'] = htmlentities($row[$key]);
           }
           elseif ($key == $this->options['fields']['guid']) {
             $item['guid'] = $row[$key];