fix: エスケープされていなかったので修正

NetCommons3 · Dec 19, 2019 · cd53bc1 · cd53bc1
1 parent 98ef490
commit cd53bc1
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/View/Elements/list.ctp b/View/Elements/list.ctp
@@ -72,7 +72,7 @@ if (!empty($users)) {
 							?>
 
 							<?php echo $this->NetCommonsHtml->avatarLink(
-									$displayUser, ['alt' => $displayUser['handlename']], [], 'id'); ?>
+									$displayUser, ['alt' => h($displayUser['handlename'])], [], 'id'); ?>
 
 							<?php
 							if ($count >= GroupsUser::LIST_DISPLAY_NUM):