Update index.phtml

Escape HTML for user name
LM-Commons · Jul 5, 2023 · 3640c6e · 3640c6e
1 parent 7d7e32c
commit 3640c6e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/view/lmc-user/user/index.phtml b/view/lmc-user/user/index.phtml
@@ -1,4 +1,4 @@
 <div style="float:left; padding-right:16px;"><?php echo $this->gravatar($this->lmcUserIdentity()->getEmail()) ?></div>
-<h3><?php echo $this->translate('Hello'); ?>, <?php echo $this->lmcUserDisplayName() ?>!</h3>
+<h3><?php echo $this->translate('Hello'); ?>, <?php echo $this->escapeHtml($this->lmcUserDisplayName()) ?>!</h3>
 <a href="<?php echo $this->url('lmcuser/logout') ?>">[<?php echo $this->translate('Sign Out'); ?>]</a>
 <div style="clear:both;"></div>