From bddc5cbeb7ff237a72943b304dcb01c653781767 Mon Sep 17 00:00:00 2001
From: Alex Tselegidis <alextselegidis@gmail.com>
Date: Sat, 15 Apr 2023 14:03:28 +0200
Subject: [PATCH] Escape the user display name in the backend section

---
 application/views/components/backend_header.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/application/views/components/backend_header.php b/application/views/components/backend_header.php
index f631d5d6aa..a67911b6c8 100755
--- a/application/views/components/backend_header.php
+++ b/application/views/components/backend_header.php
@@ -86,7 +86,7 @@
                 <a class="nav-link dropdown-toggle" href="#" data-bs-toggle="dropdown"
                    data-tippy-content="<?= lang('settings_hint') ?>">
                     <i class="fas fa-user me-2"></i>
-                    <?= vars('user_display_name') ?>
+                    <?= e(vars('user_display_name')) ?>
                 </a>
                 <div class="dropdown-menu dropdown-menu-end">
                     <?php if (can('view', PRIV_SYSTEM_SETTINGS)): ?>