From fb4cbc73bae831e68fe8234811184f46077db5e6 Mon Sep 17 00:00:00 2001
From: winter
Date: Mon, 20 Jan 2025 17:48:33 +0000
Subject: fix some xss situations

---
 templates/skeleton.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'templates/skeleton.php')

diff --git a/templates/skeleton.php b/templates/skeleton.php
index afe7321..a7b6e95 100644
--- a/templates/skeleton.php
+++ b/templates/skeleton.php
@@ -49,7 +49,7 @@ $settings = GlobalSettings::getInstance();
             else: ?>
                 <a href="/@/<?= $user->actor->handle ?>" id="currentUserInfo">
                     <?php call_template('actor_avatar', ['actor' => $user->actor]) ?>
-                    <?= $user->actor->displayName ?>
+                    <?= htmlspecialchars($user->actor->displayName) ?>
                 </a>
             <?php endif; ?>
         </nav>
-- 
cgit v1.3