From 2f2883d619417ba67f734e56087aab5ed4792c3d Mon Sep 17 00:00:00 2001
From: Hillel Coren <hillelcoren@gmail.com>
Date: Wed, 19 Apr 2017 17:59:58 +0300
Subject: [PATCH] Escape client name in history sidebar

---
 app/Libraries/HistoryUtils.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/Libraries/HistoryUtils.php b/app/Libraries/HistoryUtils.php
index 49a396474f4e..c886d68231f2 100644
--- a/app/Libraries/HistoryUtils.php
+++ b/app/Libraries/HistoryUtils.php
@@ -162,7 +162,7 @@ class HistoryUtils
                 $icon = '<i class="fa fa-users" style="width:32px"></i>';
                 if ($item->client_id) {
                     $link = url('/clients/' . $item->client_id);
-                    $name = $item->client_name;
+                    $name = e($item->client_name);
 
                     $buttonLink = url('/invoices/create/' . $item->client_id);
                     $button = '<a type="button" class="btn btn-primary btn-sm pull-right" href="' . $buttonLink . '">