From d105aa92e2e21ae1835cb0d2cb226cb717cfe032 Mon Sep 17 00:00:00 2001
From: Pedro Igor <pigor.craveiro@gmail.com>
Date: Fri, 28 Jul 2017 17:46:52 -0300
Subject: [PATCH] [KEYCLOAK-5240] - Escaping values in templates

---
 themes/src/main/resources/theme/base/account/template.ftl | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/themes/src/main/resources/theme/base/account/template.ftl b/themes/src/main/resources/theme/base/account/template.ftl
index c117cffda4..bc59407819 100644
--- a/themes/src/main/resources/theme/base/account/template.ftl
+++ b/themes/src/main/resources/theme/base/account/template.ftl
@@ -43,8 +43,8 @@
                                 </div>
                             <li>
                         </#if>
-                        <#if referrer?has_content && referrer.url?has_content><li><a href="${referrer.url}" id="referrer">${msg("backTo",referrer.name)}</a></li></#if>
-                        <li><a href="${url.logoutUrl}">${msg("doSignOut")}</a></li>
+                        <#if referrer?has_content && referrer.url?has_content><li><a href="${referrer.url?html}" id="referrer">${msg("backTo",referrer.name?html)}</a></li></#if>
+                        <li><a href="${url.logoutUrl?html}">${msg("doSignOut")}</a></li>
                     </ul>
                 </div>
             </div>