Some more escaping

[friendica.git] / view / theme / frio / templates / mail_list.tpl

diff --git a/view/theme/frio/templates/mail_list.tpl b/view/theme/frio/templates/mail_list.tpl
index 225fd71c183786ac1b73cae170595952f52b9136..e6a024f11c68a123d25e8a823f9d0001abebbf7e 100644 (file)
--- a/view/theme/frio/templates/mail_list.tpl
+++ b/view/theme/frio/templates/mail_list.tpl
@@ -11,7 +11,7 @@
                        <div class="media-body">
                                <div class="text-muted time ago pull-right" title="{{$date}}">{{$ago}}</div>
 
-                               <h4 class="media-heading">{{$from_name}}</h4>
+                               <h4 class="media-heading">{{$from_name|escape}}</h4>
                                <div class="mail-list-subject"><a href="message/{{$id}}">{{$subject}}</a></div>
                                <a href="message/dropconv/{{$id}}" onclick="return confirmDelete();"  title="{{$delete}}" class="pull-right" onmouseover="imgbright(this);" onmouseout="imgdull(this);">
                                <i class="faded-icon fa fa-trash"></i>