From 4403abf4d161a3e624dec75d4f60d813e1f485c4 Mon Sep 17 00:00:00 2001
From: Jonathan Alexis Perez Morales <jonathan.perez@adssistemas.mx>
Date: Wed, 3 May 2023 13:06:20 -0700
Subject: [PATCH] --Escape de caracteres al crear xml de cancelacion en el PAC
 5

---
 App_Code/Timbrado.vb       |  2 +-
 App_Code/modExtensiones.vb | 13 +++++++++++++
 2 files changed, 14 insertions(+), 1 deletion(-)

diff --git a/App_Code/Timbrado.vb b/App_Code/Timbrado.vb
index f48142f14..62fcbb5da 100644
--- a/App_Code/Timbrado.vb
+++ b/App_Code/Timbrado.vb
@@ -865,7 +865,7 @@ Public Class Timbrado
                                                     <usuario xmlns="""">{UsuarioServicio}</usuario>
                                                     <passwd xmlns="""">{PassServicio}</passwd>
                                                     <rfcEmisor xmlns="""">{rfcEmisor}</rfcEmisor>
-                                                    <arregloUUID xmlns="""">{arregloUUID}|{rfcReceptor}|{rfcEmisor}|{Total}|{MotivoCancelacion}|{FolioSustitucion}</arregloUUID>
+                                                    <arregloUUID xmlns="""">{arregloUUID}|{rfcReceptor.ToEscapeXML()}|{rfcEmisor.ToEscapeXML()}|{Total}|{MotivoCancelacion}|{FolioSustitucion}</arregloUUID>
                                                     <cert xmlns="""">{certBase64}</cert>
                                                     <key xmlns="""">{keyBase64}</key>
                                                     <keyPass xmlns="""">{keyPass}</keyPass>
diff --git a/App_Code/modExtensiones.vb b/App_Code/modExtensiones.vb
index 9b8998052..fb6ddaac8 100644
--- a/App_Code/modExtensiones.vb
+++ b/App_Code/modExtensiones.vb
@@ -3960,6 +3960,19 @@ Namespace Extensiones
 
             Return text
         End Function
+
+
+        <Runtime.CompilerServices.Extension()>
+        Function ToEscapeXML(ByVal str As String) As String
+            Dim text As String = ""
+
+            text = str.Replace("'", "&apos;")
+            text = str.Replace("<", "&lt;")
+            text = str.Replace(">", "&gt;")
+            text = str.Replace("&", "&amp;")
+
+            Return text
+        End Function
     End Module
 #End Region