From: Matthias Schmidt <gravatronics@live.com>
Date: Sun, 6 Sep 2020 12:53:46 +0000 (+0200)
Subject: Fix encoding of username in plain `user` output
X-Git-Tag: 5.3.0_Alpha_1~3
X-Git-Url: https://git.stricted.de/?a=commitdiff_plain;h=9bcfc8dd9f724d5b2d5adbc3ce6559bc9949dde9;p=GitHub%2FWoltLab%2FWCF.git

Fix encoding of username in plain `user` output
---

diff --git a/wcfsetup/install/files/lib/system/template/plugin/UserFunctionTemplatePlugin.class.php b/wcfsetup/install/files/lib/system/template/plugin/UserFunctionTemplatePlugin.class.php
index 0b85635392..4587380eb7 100644
--- a/wcfsetup/install/files/lib/system/template/plugin/UserFunctionTemplatePlugin.class.php
+++ b/wcfsetup/install/files/lib/system/template/plugin/UserFunctionTemplatePlugin.class.php
@@ -58,7 +58,7 @@ class UserFunctionTemplatePlugin implements IFunctionTemplatePlugin {
 			unset($tagArgs['type']);
 			
 			if ($type === 'plain') {
-				$content = $object->getTitle();
+				$content = StringUtil::encodeHTML($object->getTitle());
 			}
 			else if (preg_match('~^avatar(\d+)$~', $type, $matches)) {
 				$content = $object->getAvatar()->getImageTag($matches[1]);