From 9bb2eea37a3b6a45e630aeeec4b77a252eac053b Mon Sep 17 00:00:00 2001
From: Sergey Biryukov <sergeybiryukov@git.wordpress.org>
Date: Mon, 5 Aug 2019 13:14:25 +0000
Subject: [PATCH] Feeds: Escape `&` characters in `atom_site_icon()` for XML,
 for consistency with `rss2_site_icon()`.

Props abhijitrakas, shawfactor.
Fixes #47482.

git-svn-id: https://develop.svn.wordpress.org/trunk@45753 602fd350-edb4-49c9-b593-d223f7449a82
---
 src/wp-includes/feed.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/wp-includes/feed.php b/src/wp-includes/feed.php
index d01fba7c8b..7b4046b22a 100644
--- a/src/wp-includes/feed.php
+++ b/src/wp-includes/feed.php
@@ -587,7 +587,7 @@ function prep_atom_text_construct( $data ) {
 function atom_site_icon() {
 	$url = get_site_icon_url( 32 );
 	if ( $url ) {
-		echo "<icon>$url</icon>\n";
+		echo '<icon>' . convert_chars( $url ) . "</icon>\n";
 	}
 }