From 9c0ebc56082159c20880baff0368ca015d269b65 Mon Sep 17 00:00:00 2001
From: Eldad Fux <eldad.fux@gmail.com>
Date: Sat, 15 May 2021 03:24:12 +0300
Subject: [PATCH] Added string escaping

---
 app/views/console/users/index.phtml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/views/console/users/index.phtml b/app/views/console/users/index.phtml
index b750a3f94d..0e5fad7931 100644
--- a/app/views/console/users/index.phtml
+++ b/app/views/console/users/index.phtml
@@ -77,7 +77,7 @@ $auth = $this->getParam('auth', []);
                                     <td data-title="Name: ">
                                         <a data-ls-attrs="href=/console/users/user?id={{user.$id}}&project={{router.params.project}}">
                                             <span data-ls-bind="{{user.name}}"></span>
-                                            <span data-ls-if="{{user.name}} === ''">-----</span>
+                                            <span data-ls-if="{{user.name|escape}} === ''">-----</span>
                                         </a>
                                     </td>
                                     <td data-title="Email: ">