From dac0a90605da0f15e034784fe903fdeddc867944 Mon Sep 17 00:00:00 2001
From: "chunmao.guo" <chunmao.guo@bambulab.com>
Date: Fri, 30 Jun 2023 15:53:27 +0800
Subject: [PATCH] FIX: xml_escape thumbnail paths

Change-Id: I781b529162b70945156c13796806db507042ad7c
---
 src/libslic3r/Format/bbs_3mf.cpp | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/src/libslic3r/Format/bbs_3mf.cpp b/src/libslic3r/Format/bbs_3mf.cpp
index bbd18a0be..6e756370a 100644
--- a/src/libslic3r/Format/bbs_3mf.cpp
+++ b/src/libslic3r/Format/bbs_3mf.cpp
@@ -5896,20 +5896,20 @@ void PlateData::parse_filament_info(GCodeProcessorResult *result)
                            << "\" Id=\"rel-2\" Type=\"http://schemas.openxmlformats.org/package/2006/relationships/metadata/thumbnail\"/>\n";
                 } else {
                     std::string thumbnail_file_str = (boost::format("Metadata/plate_%1%.png") % (export_plate_idx + 1)).str();
-                    stream << " <Relationship Target=\"/" << thumbnail_file_str
+                    stream << " <Relationship Target=\"/" << xml_escape(thumbnail_file_str)
                         << "\" Id=\"rel-2\" Type=\"http://schemas.openxmlformats.org/package/2006/relationships/metadata/thumbnail\"/>\n";
                 }
             } else {
-                stream << " <Relationship Target=\"/" << data._3mf_thumbnail
+                stream << " <Relationship Target=\"/" << xml_escape(data._3mf_thumbnail)
                        << "\" Id=\"rel-2\" Type=\"http://schemas.openxmlformats.org/package/2006/relationships/metadata/thumbnail\"/>\n";
             }
 
             if (!data._3mf_printer_thumbnail_middle.empty()) {
-                stream << " <Relationship Target=\"/" << data._3mf_printer_thumbnail_middle
+                stream << " <Relationship Target=\"/" << xml_escape(data._3mf_printer_thumbnail_middle)
                        << "\" Id=\"rel-4\" Type=\"http://schemas.bambulab.com/package/2021/cover-thumbnail-middle\"/>\n";
             }
             if (!data._3mf_printer_thumbnail_small.empty())
-                stream << " <Relationship Target=\"/" << data._3mf_printer_thumbnail_small
+                stream << " <Relationship Target=\"/" << xml_escape(data._3mf_printer_thumbnail_small)
                        << "\" Id=\"rel-5\" Type=\"http://schemas.bambulab.com/package/2021/cover-thumbnail-small\"/>\n";
         }
         else if (targets.empty()) {