We are now escaping many template fields

[friendica.git] / view / theme / frio / templates / mail_list.tpl

diff --git a/view/theme/frio/templates/mail_list.tpl b/view/theme/frio/templates/mail_list.tpl
index 4a797d47c0b760cb48aa3a51e18998457f51318f..225fd71c183786ac1b73cae170595952f52b9136 100644 (file)
--- a/view/theme/frio/templates/mail_list.tpl
+++ b/view/theme/frio/templates/mail_list.tpl
@@ -5,7 +5,7 @@
                <div class="media">
                        <div class="pull-left contact-photo-wrapper">
                                <a href="{{$from_url}}" title="{{$from_addr}}">
-                                       <img class="media-object" src="{{$from_photo}}" alt="{{$from_name}}" title="{{$from_addr}}" />
+                                       <img class="media-object" src="{{$from_photo}}" alt="{{$from_name|escape}}" title="{{$from_addr|escape}}" />
                                </a>
                        </div>
                        <div class="media-body">