Escape full name

TNL-3849/SEC-69
2016-03-15 12:44:57 -04:00
parent f3d000ec18
commit e18a44a0a5
1 changed files with 1 additions and 1 deletions
--- a/lms/templates/verify_student/pay_and_verify.html
+++ b/lms/templates/verify_student/pay_and_verify.html
@@ -59,7 +59,7 @@ from lms.djangoapps.verify_student.views import PayAndVerifyView
    <div
      id="pay-and-verify-container"
      class="pay-and-verify"
-      data-full-name='${user_full_name}'
+      data-full-name='${user_full_name | h}'
      data-platform-name='${platform_name}'
      data-course-key='${course_key}'
      data-course-name='${course.display_name|h}'