From 07a05db26e1c2f4d7a2226e9d8ef62e6e421a4a1 Mon Sep 17 00:00:00 2001
From: fiaxh <git@lightrise.org>
Date: Mon, 3 Jan 2022 19:41:04 +0100
Subject: Escape occupant name and JID in occupants view

fixes #1141
---
 main/src/ui/occupant_menu/view.vala | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 'main')

diff --git a/main/src/ui/occupant_menu/view.vala b/main/src/ui/occupant_menu/view.vala
index ebad6f09..428d2c99 100644
--- a/main/src/ui/occupant_menu/view.vala
+++ b/main/src/ui/occupant_menu/view.vala
@@ -66,9 +66,9 @@ public class View : Popover {
         selected_jid = jid;
         stack.transition_type = StackTransitionType.SLIDE_LEFT;
 
-        string name = name_;
+        string name = Markup.escape_text(name_);
         Jid? real_jid = stream_interactor.get_module(MucManager.IDENTITY).get_real_jid(jid, conversation.account);
-        if (real_jid != null) name += @"\n<span font=\'8\'>$(real_jid.bare_jid)</span>";
+        if (real_jid != null) name += "\n<span font=\'8\'>%s</span>".printf(Markup.escape_text(real_jid.bare_jid.to_string()));
 
         Box header_box = new Box(Orientation.HORIZONTAL, 5) { visible=true };
         header_box.add(new Image.from_icon_name("pan-start-symbolic", IconSize.SMALL_TOOLBAR) { visible=true });
-- 
cgit v1.2.3-54-g00ecf