From 2b4be458441ec61463114f1f6ba6d1b6d5038c32 Mon Sep 17 00:00:00 2001
From: =?utf8?q?Joshua=20R=C3=BCsweg?= <josh@joshsboard.de>
Date: Fri, 16 May 2014 15:04:04 +0200
Subject: [PATCH] fix xss leak

---
 com.woltlab.wcf/templates/registerActivation.tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/com.woltlab.wcf/templates/registerActivation.tpl b/com.woltlab.wcf/templates/registerActivation.tpl
index 266516d433..98d455f5c9 100644
--- a/com.woltlab.wcf/templates/registerActivation.tpl
+++ b/com.woltlab.wcf/templates/registerActivation.tpl
@@ -39,7 +39,7 @@
 			<dl{if $errorField == 'username'} class="formError"{/if}>
 				<dt><label for="username">{lang}wcf.user.username{/lang}</label></dt>
 				<dd>
-					<input type="text" id="username" name="username" value="{@$username}" required="required" class="medium" />
+					<input type="text" id="username" name="username" value="{$username}" required="required" class="medium" />
 					{if $errorField == 'username'}
 						<small class="innerError">
 							{if $errorType == 'notFound'}{lang}wcf.user.username.error.notFound{/lang}{/if}
-- 
2.20.1