Commit 7ce0257f authored by Richard Mansfield's avatar Richard Mansfield
Browse files

Escape user's name in user stats page

Signed-off-by: default avatarRichard Mansfield <>
parent 490202cf
......@@ -290,7 +290,7 @@ function user_statistics($limit, $offset, &$sitedata) {
round($meanfriends, 1),
get_config('wwwroot') . 'user/view.php?id=' . $maxfriends->id,
display_name($maxfriends, null, true),
hsc(display_name($maxfriends, null, true)),
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment