From fea38c8e1bdb5f68c351c5e2a02daba8e9a1cc76 Mon Sep 17 00:00:00 2001
From: FreddleSpl0it <75116288+FreddleSpl0it@users.noreply.github.com>
Date: Fri, 24 Jul 2026 11:16:39 +0200
Subject: [PATCH] [Web] escape mailbox name

---
 data/web/js/site/mailbox.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/data/web/js/site/mailbox.js b/data/web/js/site/mailbox.js
index 0a0192798..5ad5cceab 100644
--- a/data/web/js/site/mailbox.js
+++ b/data/web/js/site/mailbox.js
@@ -996,6 +996,7 @@ jQuery(function($){
               'style="min-width:2em;width:' + item.percent_in_use + '%">' + item.percent_in_use + '%' + '</div></div>'
             };
             item.username = escapeHtml(item.username);
+            item.name = escapeHtml(item.name);
 
             if (Array.isArray(item.tags)){
               var tags = '';