mirror of https://github.com/iv-org/invidious.git
Merge pull request #3205 from iv-org/escape-username
This commit is contained in:
commit
88007a08f2
|
@ -68,7 +68,7 @@
|
|||
</div>
|
||||
<% if env.get("preferences").as(Preferences).show_nick %>
|
||||
<div class="pure-u-1-4">
|
||||
<span id="user_name"><%= env.get("user").as(Invidious::User).email %></span>
|
||||
<span id="user_name"><%= HTML.escape(env.get("user").as(Invidious::User).email) %></span>
|
||||
</div>
|
||||
<% end %>
|
||||
<div class="pure-u-1-4">
|
||||
|
|
Loading…
Reference in New Issue