this got lost by merge

diff --git a/include/conversation.php b/include/conversation.php
index 7417dbf812b4ece2c95caa3fbc007a4a620bbbec..0907b5dce23cfe2ac0b569a3a9e5453c44dbe4c7 100644 (file)
--- a/include/conversation.php
+++ b/include/conversation.php
@@ -987,7 +987,7 @@ function builtin_activity_puller($item, &$conv_responses) {
                        else 
                                $url = zrl($url);
                        
-                       $url = '<a href="'. $url . '"'. $sparkle .'>' . $item['author-name'] . '</a>';
+                       $url = '<a href="'. $url . '"'. $sparkle .'>' . htmlentities($item['author-name']) . '</a>';
 
                        if(! $item['thr-parent'])
                                $item['thr-parent'] = $item['parent-uri'];