From 73a6595ca85984d65f656c6356fabb23d1936c54 Mon Sep 17 00:00:00 2001
From: Carlos Garcia Gomez <neorazorx@gmail.com>
Date: Thu, 28 Apr 2022 11:29:31 +0200
Subject: [PATCH] Sanitized username when showing user not found message.
 ------ Saneado nombre de usuario al mostrar el mensaje de usuario no
 encontrado.

---
 Core/App/AppController.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/Core/App/AppController.php b/Core/App/AppController.php
index 83c42b7241..0dd563c518 100644
--- a/Core/App/AppController.php
+++ b/Core/App/AppController.php
@@ -287,7 +287,7 @@ private function userAuth()
         }
 
         $this->ipWarning();
-        ToolBox::i18nLog()->warning('login-user-not-found', ['%nick%' => $nick]);
+        ToolBox::i18nLog()->warning('login-user-not-found', ['%nick%' => htmlspecialchars($nick)]);
         return false;
     }