Escape Atom feed content

[NeverBehave]

Summary

• escape dynamic metadata and entry titles in both Atom feeds
• escape rendered HTML content before embedding it in Atom XML
• address the Copilot finding from Add ramblings section #80 and the same pre-existing issue in the main post feed

Testing

• Eleventy production build
• xmllint validation for both Atom feeds and sitemap
• temporary regression fixture containing ampersand and less-than characters

[Copilot]

Copilot review overview

🔵 Needs a closer look

Moderate findings remain because URL values in both feeds are not XML-escaped.

Review effort: Lite
Findings: None

What changed in this PR

Updates both Atom feed templates to XML-escape dynamic metadata, titles, and rendered content.

Changes:

• Escapes feed metadata and entry titles.
• Escapes rendered HTML content within Atom XML.

File	Summary
src/​feed.njk	Updates escaping for the main Atom feed.
src/​ramblings-feed.njk	Updates escaping for the ramblings Atom feed.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.