<div class="vcard h-card">
- <div class="fn label p-name">{{$profile.name}}</div>
+ <div class="fn label p-name">{{$profile.name|escape}}</div>
- {{if $profile.addr}}<div class="p-addr">{{$profile.addr}}</div>{{/if}}
+ {{if $profile.addr}}<div class="p-addr">{{$profile.addr|escape}}</div>{{/if}}
{{if $profile.pdesc}}<div class="title">{{$profile.pdesc}}</div>{{/if}}
- <div id="profile-photo-wrapper"><img class="photo u-photo" width="175" height="175" src="{{$profile.photo}}?rev={{$profile.picdate}}" alt="{{$profile.name}}"></div>
+ <div id="profile-photo-wrapper"><img class="photo u-photo" width="175" height="175" src="{{$profile.photo}}?rev={{$profile.picdate}}" alt="{{$profile.name|escape}}"></div>
{{if $account_type}}<div class="account-type">{{$account_type}}</div>{{/if}}