HTML-Code aufgeräumt, Attribute gequotet, HTML-Sonderzeichen in Werten escapet.

[mfinanz.git] / templates / webpages / admin / user_migration_done_master.html

diff --git a/templates/webpages/admin/user_migration_done_master.html b/templates/webpages/admin/user_migration_done_master.html
index 9e16d4841f7c2f8f34659bd2574283fde987053f..dd7b32ae6ad7c899953bb8b2eff524e3ddd98ee9 100644 (file)
--- a/templates/webpages/admin/user_migration_done_master.html
+++ b/templates/webpages/admin/user_migration_done_master.html
@@ -7,7 +7,7 @@
   <p><translate>The following users have been migrated into the
     authentication database:</translate></p>
 
-  <p>[% FOREACH row = MEMBERS %][% row.login %] [% END %]</p>
+  <p>[% FOREACH row = MEMBERS %][% HTML.escape(row.login) %] [% END %]</p>
 
   <input type="hidden" name="nextsub" value="create_standard_group_ask">