Bugfix: The contact names had to be escaped

[friendica.git] / object / Item.php

diff --git a/object/Item.php b/object/Item.php
index 0dc4f41985a3f82cbfc71b2ea7f57598c4752453..cc6d08ec2b4e3e7e23d91fdd51b35e9e2d28389b 100644 (file)
--- a/object/Item.php
+++ b/object/Item.php
@@ -134,7 +134,7 @@ class Item extends BaseObject {
                $filer = (($conv->get_profile_owner() == local_user()) ? t("save to folder") : false);
 
                $diff_author    = ((link_compare($item['url'],$item['author-link'])) ? false : true);
-               $profile_name   = (((strlen($item['author-name']))   && $diff_author) ? $item['author-name']   : $item['name']);
+               $profile_name   = htmlentities(((strlen($item['author-name']))   && $diff_author) ? $item['author-name']   : $item['name']);
                if($item['author-link'] && (! $item['author-name']))
                        $profile_name = $item['author-link'];