One more place we shouldn't trust user_email.

2026-09-24 16:30:27 +08:00 · 2014-12-08 17:16:21 -05:00
parent 77cf30a1c7
commit ebdbda1bdc
1 changed files with 1 additions and 1 deletions
@@ -21,7 +21,7 @@
        ## Refresh masthead == user changes (backward compatibility)
        if ( parent.user_changed ) {
            %if trans.user:
-                parent.user_changed( "${trans.user.email}", ${int( app.config.is_admin_user( trans.user ) )} );
+                parent.user_changed( "${trans.user.email | h }", ${int( app.config.is_admin_user( trans.user ) )} );
            %else:
                parent.user_changed( null, false );
            %endif