From d263274071048fc0c0d18644ad8a5ac49bf14d7b Mon Sep 17 00:00:00 2001
From: Aurélien Bompard <aurelien@bompard.org>
Date: Wed, 14 Nov 2012 17:51:08 +0100
Subject: Escape some more email addresses

---
 hyperkitty/templates/messages/message.html  | 2 +-
 hyperkitty/templates/month_view.html        | 2 +-
 hyperkitty/templates/threads/right_col.html | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/hyperkitty/templates/messages/message.html b/hyperkitty/templates/messages/message.html
index d408936..460e217 100644
--- a/hyperkitty/templates/messages/message.html
+++ b/hyperkitty/templates/messages/message.html
@@ -19,7 +19,7 @@
         {% gravatar_img_for_email email.email 40 %}
     </div>
 	<div class="email_author inline-block">
-		<span class="name"><a href="{% url message_index mlist_fqdn=list_address, hashid=email.message_id_hash %}">{{email.sender_name}}</a></span>
+		<span class="name"><a href="{% url message_index mlist_fqdn=list_address, hashid=email.message_id_hash %}">{{email.sender_name|escapeemail}}</a></span>
         {% if use_mockups %}
 		<br />
 		<span class="rank">
diff --git a/hyperkitty/templates/month_view.html b/hyperkitty/templates/month_view.html
index f3d0935..cff4c31 100644
--- a/hyperkitty/templates/month_view.html
+++ b/hyperkitty/templates/month_view.html
@@ -52,7 +52,7 @@
 				{% gravatar_img_for_email thread.starting_email.sender_email 40 %}
 				<br />
 				{% endif %}
-				{{ thread.starting_email.sender_name }}
+				{{ thread.starting_email.sender_name|escapeemail }}
 			</div>
 			<div class="thread_email">
 				<span class="expander">{{ thread.starting_email.content }}</span>
diff --git a/hyperkitty/templates/threads/right_col.html b/hyperkitty/templates/threads/right_col.html
index 1b1cf76..11ff90a 100644
--- a/hyperkitty/templates/threads/right_col.html
+++ b/hyperkitty/templates/threads/right_col.html
@@ -53,7 +53,7 @@
 			{% for name, email in participants.items|sort %}
 			<li>
 				{% gravatar_img_for_email email 20 %}
-				{{ name }}
+				{{ name|escapeemail }}
 			</li>
 			{% endfor %}
 		</ul>
-- 
cgit