From 250476f77ce3dbd89e8dd62b246a59a8eff9c537 Mon Sep 17 00:00:00 2001
From: Tobias Fella <fella@posteo.de>
Date: Sat, 29 Jul 2023 15:42:53 +0200
Subject: [PATCH] Html-escape display names in state delegates

(cherry picked from commit 163c1ef4077955fc39068197b7b6d877ccf5b39b)
---
 src/models/collapsestateproxymodel.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/models/collapsestateproxymodel.cpp b/src/models/collapsestateproxymodel.cpp
index 81a0f62f9..e09ec44ad 100644
--- a/src/models/collapsestateproxymodel.cpp
+++ b/src/models/collapsestateproxymodel.cpp
@@ -81,7 +81,7 @@ QString CollapseStateProxyModel::aggregateEventToString(int sourceRow) const
                                                       : QStringLiteral("<a href=\"https://matrix.to/#/%1\" style=\"color: %2\">%3</a> ")
                                                             .arg(uniqueAuthors[0].toMap()["id"].toString(),
                                                                  uniqueAuthors[0].toMap()["color"].toString(),
-                                                                 uniqueAuthors[0].toMap()["displayName"].toString());
+                                                                 uniqueAuthors[0].toMap()["displayName"].toString().toHtmlEscaped());
         text += userText;
         text += chunks.takeFirst();