From a343e044d44db6e0eb84dc9933c432546809d52c Mon Sep 17 00:00:00 2001
From: Hillel Coren <hillelcoren@gmail.com>
Date: Tue, 16 May 2017 11:20:07 +0300
Subject: [PATCH] Encode names in history sidebar

---
 app/Libraries/HistoryUtils.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/Libraries/HistoryUtils.php b/app/Libraries/HistoryUtils.php
index c886d68231f2..cfd45207b40e 100644
--- a/app/Libraries/HistoryUtils.php
+++ b/app/Libraries/HistoryUtils.php
@@ -183,7 +183,7 @@ class HistoryUtils
             }
 
             $icon = '<i class="fa fa-' . EntityModel::getIcon($item->entityType . 's') . '" style="width:24px"></i>';
-            $str .= sprintf('<li style="text-align:right; padding-right:18px;"><a href="%s">%s %s</a></li>', $item->url, $item->name, $icon);
+            $str .= sprintf('<li style="text-align:right; padding-right:18px;"><a href="%s">%s %s</a></li>', $item->url, e($item->name), $icon);
         }
 
         return $str;