From 9bcfc8dd9f724d5b2d5adbc3ce6559bc9949dde9 Mon Sep 17 00:00:00 2001 From: Matthias Schmidt Date: Sun, 6 Sep 2020 14:53:46 +0200 Subject: [PATCH] Fix encoding of username in plain `user` output --- .../system/template/plugin/UserFunctionTemplatePlugin.class.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wcfsetup/install/files/lib/system/template/plugin/UserFunctionTemplatePlugin.class.php b/wcfsetup/install/files/lib/system/template/plugin/UserFunctionTemplatePlugin.class.php index 0b85635392..4587380eb7 100644 --- a/wcfsetup/install/files/lib/system/template/plugin/UserFunctionTemplatePlugin.class.php +++ b/wcfsetup/install/files/lib/system/template/plugin/UserFunctionTemplatePlugin.class.php @@ -58,7 +58,7 @@ class UserFunctionTemplatePlugin implements IFunctionTemplatePlugin { unset($tagArgs['type']); if ($type === 'plain') { - $content = $object->getTitle(); + $content = StringUtil::encodeHTML($object->getTitle()); } else if (preg_match('~^avatar(\d+)$~', $type, $matches)) { $content = $object->getAvatar()->getImageTag($matches[1]); -- 2.20.1