Escape Employee email

Leoche · Sep 4, 2019 · e0e04de · e0e04de
1 parent cd162a2
commit e0e04de
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/...pBundle/Resources/views/Admin/Configure/AdvancedParameters/Employee/Blocks/form.html.twig b/...pBundle/Resources/views/Admin/Configure/AdvancedParameters/Employee/Blocks/form.html.twig
@@ -65,7 +65,7 @@
                 {{ 'Your avatar in PrestaShop 1.7.x is your profile picture on %url%. To change your avatar, log in to PrestaShop.com with your email %email% and follow the on-screen instructions.'|trans({}, 'Admin.Advparameters.Help')
                     |replace({
                       '%url%': '<a href="https://www.prestashop.com/forums/" class="alert-link" target="_blank">PrestaShop.com</a>',
-                      '%email%': employeeForm.email.vars.value
+                      '%email%': (employeeForm.email.vars.value|escape)
                     })|raw
                 }}
               </p>