(fix) properly escape the user's display name (fixes #3617)

This commit is contained in:
Ludovic Marcotte committed 2016-04-06 08:50:40 -04:00
1 parent 59dadfd6a4
commit 0c6beb3fd7
2 files changed
+2 -1

No files matched your search

+1 -1
View File
@@ -93,7 +93,7 @@
<var:if condition="shortUserNameForDisplay" const:value="anonymous" const:negate="YES">
var UserFolderURL = '<var:string value="userFolderPath" const:escapeHTML="NO" />';
var UserLogin = '<var:string value="shortUserNameForDisplay" const:escapeHTML="NO" />';
var UserIdentification = '<var:string value="userIdentification" const:escapeHTML="NO" />';
var UserIdentification = <var:string value="userIdentification.doubleQuotedString" const:escapeHTML="NO" />;
var UserEmail = '<var:string value="userEmail" const:escapeHTML="NO" />';
var UserLanguage = '<var:string value="userLanguage" const:escapeHTML="NO" />';