diff --git a/templates/main.phtml b/templates/main.phtml
index 5052d2956d..80af6b9fa6 100644
--- a/templates/main.phtml
+++ b/templates/main.phtml
@@ -82,7 +82,7 @@ endif; ?>">
 
     <div class="dropdown ml-3 d-inline-flex align-items-center">
         <div class="mr-2">
-            <?= $user->getDisplayName() ?>
+            <?= $this->e($user->getDisplayName()) ?>
         </div>
 
         <button aria-expanded="false" aria-haspopup="true" class="navbar-toggler" aria-label="<?= __(