From 2f0f996c1d46a7cf388093b971f6c756c8cc3933 Mon Sep 17 00:00:00 2001
From: Frederic Guillot <fred@kanboard.net>
Date: Thu, 23 Feb 2017 20:48:07 -0500
Subject: Escape custom role name

---
 app/Template/project_user_overview/tooltip_users.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'app/Template/project_user_overview')

diff --git a/app/Template/project_user_overview/tooltip_users.php b/app/Template/project_user_overview/tooltip_users.php
index 99b00030..8bc821e7 100644
--- a/app/Template/project_user_overview/tooltip_users.php
+++ b/app/Template/project_user_overview/tooltip_users.php
@@ -4,7 +4,7 @@
     <table class="table-small">
     <?php foreach ($roles as $role => $role_name): ?>
         <?php if (isset($users[$role])): ?>
-        <tr><th><?= $role_name ?></th></tr>
+        <tr><th><?= $this->text->e($role_name) ?></th></tr>
             <?php foreach ($users[$role] as $user_id => $user): ?>
                 <tr><td>
                 <?= $this->url->link($this->text->e($user), 'ProjectUserOverviewController', 'opens', array('user_id' => $user_id)) ?>
-- 
cgit v1.2.3