Escape custom role name

2017-02-23 20:48:07 -05:00 · 2017-02-23 20:48:07 -05:00 · 2f0f996c1d
parent f1fcaedbd2
commit 2f0f996c1d
1 changed files with 1 additions and 1 deletions
--- a/app/Template/project_user_overview/tooltip_users.php
+++ b/app/Template/project_user_overview/tooltip_users.php
@ -4,7 +4,7 @@
    <table class="table-small">
    <?php foreach ($roles as $role => $role_name): ?>
        <?php if (isset($users[$role])): ?>
-        <tr><th><?= $role_name ?></th></tr>
+        <tr><th><?= $this->text->e($role_name) ?></th></tr>
            <?php foreach ($users[$role] as $user_id => $user): ?>
                <tr><td>
                <?= $this->url->link($this->text->e($user), 'ProjectUserOverviewController', 'opens', array('user_id' => $user_id)) ?>