From 24276cb4166b2057de73569ec33046a80a8bb437 Mon Sep 17 00:00:00 2001
From: Buster Neece <buster@busterneece.com>
Date: Wed, 19 Apr 2023 19:25:15 -0500
Subject: [PATCH] Escape user display name in menu.

---
 templates/main.phtml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/main.phtml b/templates/main.phtml
index 5052d2956d..80af6b9fa6 100644
--- a/templates/main.phtml
+++ b/templates/main.phtml
@@ -82,7 +82,7 @@ endif; ?>">
 
     <div class="dropdown ml-3 d-inline-flex align-items-center">
         <div class="mr-2">
-            <?= $user->getDisplayName() ?>
+            <?= $this->e($user->getDisplayName()) ?>
         </div>
 
         <button aria-expanded="false" aria-haspopup="true" class="navbar-toggler" aria-label="<?= __(