Escape user display name in menu.

AzuraCast · Apr 20, 2023 · 24276cb · 24276cb
1 parent f7ea58e
commit 24276cb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/templates/main.phtml b/templates/main.phtml
@@ -82,7 +82,7 @@ endif; ?>">
 
     <div class="dropdown ml-3 d-inline-flex align-items-center">
         <div class="mr-2">
-            <?= $user->getDisplayName() ?>
+            <?= $this->e($user->getDisplayName()) ?>
         </div>
 
         <button aria-expanded="false" aria-haspopup="true" class="navbar-toggler" aria-label="<?= __(