escaping api key name

Leantime · Nov 12, 2024 · 71fe68a · 71fe68a
1 parent 3f8b2c6
commit 71fe68a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/Domain/Setting/Templates/editCompanySettings.tpl.php b/app/Domain/Setting/Templates/editCompanySettings.tpl.php
@@ -216,7 +216,7 @@ class="fa fa-cog"></span><?php echo $tpl->__('subtitles.defaults'); ?>
                                             <li><a href="<?= BASE_URL?>/api/delAPIKey/<?= $apiKey['id'] ?>" class="delete"><i class="fa fa-trash"></i> Delete Key</a></li>
                                         </ul>
                                     </div>
-                                    <a href="#/api/apiKey/<?= $apiKey['id'] ?>"><strong><?= $apiKey['firstname'] ?></strong></a><br />
+                                    <a href="#/api/apiKey/<?= $apiKey['id'] ?>"><strong><?= $tpl->escape($apiKey['firstname']) ?></strong></a><br />
                                     lt_<?= $apiKey['username'] ?>***
                                     | <?= $tpl->__('labels.created_on')?>: <?= format($apiKey['createdOn'])->date() ?> | <?= $tpl->__('labels.last_used')?>: <?= format($apiKey['lastlogin'])->date() ?>