xml: quickfix quoted xml

CHANGELOG.md

@@ -1,5 +1,10 @@
 # ChangeLog
 
+## 3.0.7 - 2023-06-02
+
+Fixes:
+- fix generated xml response
+
 ## 3.0.6 - 2023-05-22
 
 Fixes:

b3lb/rest/b3lb/utils.py

@@ -15,11 +15,11 @@
 # along with this program. If not, see <https://www.gnu.org/licenses/>.
 
 # This utils file contains functions without import of b3lb files to prevent circular imports
-from xml.sax.saxutils import escape, quoteattr
+from xml.sax.saxutils import escape
 
 
-def xml_escape(string) -> str:
+def xml_escape(string: str) -> str:
     if isinstance(string, str):
-        return quoteattr(escape(string))
+        return escape(string)
     else:
         return ""

b3lb/rest/classes/api.py

@@ -371,9 +371,9 @@ def check_parameters(self, meeting: Meeting = None):
             if self.request.method == "GET" and hasattr(self.secret.tenant, 'asset') and self.secret.tenant.asset.slide:
                 slide_base64 = self.secret.tenant.asset.slide_base64
                 if slide_base64:
-                    self.body = f'<modules><module name="presentation"><document name={self.secret.tenant.asset.s_filename}>{slide_base64}</document></module></modules>'
+                    self.body = f'<modules><module name="presentation"><document name="{self.secret.tenant.asset.s_filename}">{slide_base64}</document></module></modules>'
                 else:
-                    self.body = f'<modules><module name="presentation"><document url="{self.secret.tenant.asset.slide_url}" filename={self.secret.tenant.asset.s_filename}></document></module></modules>'
+                    self.body = f'<modules><module name="presentation"><document url="{self.secret.tenant.asset.slide_url}" filename="{self.secret.tenant.asset.s_filename}"></document></module></modules>'
                 self.request.method = "POST"
 
             # check if records are enabled