From 69b3dd636201d340ab6bdfa49ed95456a4e5acb7 Mon Sep 17 00:00:00 2001 From: zeripath <art27@cantab.net> Date: Wed, 26 Aug 2020 14:47:38 +0100 Subject: [PATCH] Escape Email in forgot_password.tmpl (#12610) Signed-off-by: Andrew Thornton <art27@cantab.net> --- templates/user/auth/forgot_passwd.tmpl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/templates/user/auth/forgot_passwd.tmpl b/templates/user/auth/forgot_passwd.tmpl index 1e061763a5..111e42a3df 100644 --- a/templates/user/auth/forgot_passwd.tmpl +++ b/templates/user/auth/forgot_passwd.tmpl @@ -10,7 +10,7 @@ <div class="ui attached segment"> {{template "base/alert" .}} {{if .IsResetSent}} - <p>{{.i18n.Tr "auth.reset_password_mail_sent_prompt" .Email .ResetPwdCodeLives | Str2html}}</p> + <p>{{.i18n.Tr "auth.reset_password_mail_sent_prompt" (Escape .Email) .ResetPwdCodeLives | Str2html}}</p> {{else if .IsResetRequest}} <div class="required inline field {{if .Err_Email}}error{{end}}"> <label for="email">{{.i18n.Tr "email"}}</label>