From 9926ecf39c40c06f5084f34f7ad2427b56311fb2 Mon Sep 17 00:00:00 2001
From: joey <joey@0fa5a96a-9a0e-0410-b3b2-a0fd24251071>
Date: Mon, 4 Sep 2006 04:31:41 +0000
Subject: [PATCH] close a possible XSS hole

---
 templates/recentchanges.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/recentchanges.tmpl b/templates/recentchanges.tmpl
index 726e52f64..f927cf62f 100644
--- a/templates/recentchanges.tmpl
+++ b/templates/recentchanges.tmpl
@@ -30,7 +30,7 @@
 <TMPL_LOOP NAME="CHANGELOG">
 	<!-- <TMPL_VAR NAME="REV"> -->
 	<tr class="changeinfo">
-		<td class="changeinfo"><TMPL_VAR NAME="USER"></td>
+		<td class="changeinfo"><TMPL_VAR NAME="USER" ESCAPE="HTML"></td>
 		<td class="changetime"><TMPL_VAR NAME="WHEN"></td>
 		<td class="changeinfo">
 		<TMPL_LOOP NAME="PAGES">
-- 
2.26.2