Escape Email in forgot_password.tmpl (#12610) (#12612)

Signed-off-by: Andrew Thornton <art27@cantab.net>
Co-authored-by: zeripath <art27@cantab.net>

diff --git a/templates/user/auth/forgot_passwd.tmpl b/templates/user/auth/forgot_passwd.tmpl
index 1e061763a54189ef6d9e6f29d9cf633f919eba4b..111e42a3df9b6b238d3f4c005eea5d98b07c6a95 100644 (file)
--- a/templates/user/auth/forgot_passwd.tmpl
+++ b/templates/user/auth/forgot_passwd.tmpl
@@ -10,7 +10,7 @@
                                <div class="ui attached segment">
                                        {{template "base/alert" .}}
                                        {{if .IsResetSent}}
-                                               <p>{{.i18n.Tr "auth.reset_password_mail_sent_prompt" .Email .ResetPwdCodeLives | Str2html}}</p>
+                                               <p>{{.i18n.Tr "auth.reset_password_mail_sent_prompt" (Escape .Email) .ResetPwdCodeLives | Str2html}}</p>
                                        {{else if .IsResetRequest}}
                                                <div class="required inline field {{if .Err_Email}}error{{end}}">
                                                        <label for="email">{{.i18n.Tr "email"}}</label>