If I set a group name containing chars like ''<'' or ''>'' it messes up the XML that is sent to my server. A simple fix in the toXML() method of the RosterPacket class can fix the problem (see "NEW CODE" comment):
public String toXML() {
StringBuffer buf = new StringBuffer();
buf.append("<item jid=\"").append(user).append("\"");
if (name != null) {
buf.append(" name=\"").append(name).append("\"");
}
if (itemType != null) {
buf.append(" subscription=\"").append(itemType).append("\"");
}
if (itemStatus != null) {
buf.append(" ask=\"").append(itemStatus).append("\"");
}
buf.append(">");
synchronized (groupNames) {
for (int i=0; i<groupNames.size(); i++) {
String groupName = (String)groupNames.get(i);
//NEW CODE
groupName = StringUtils.escapeForXML(groupName);
//END NEW CODE
buf.append("<group>").append(groupName).append("</group>");
}
}
buf.append("</item>");
return buf.toString();
}
