From 06e30750e4006c535aad0c016ecb3f6ec6569ea7 Mon Sep 17 00:00:00 2001
From: aina-esokia <asr@esokia-webagency.com>
Date: Thu, 22 Nov 2018 14:21:12 +0400
Subject: [PATCH] fix escape in admin connected-user

---
 templates/web/admin/connected-users.html.twig | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/web/admin/connected-users.html.twig b/templates/web/admin/connected-users.html.twig
index 9477e20edf..4b784a385f 100644
--- a/templates/web/admin/connected-users.html.twig
+++ b/templates/web/admin/connected-users.html.twig
@@ -94,7 +94,7 @@
         <tbody>
             {% for session in data['sessions'] %}
                 {% set row = session['session'] %}
-            <tr title="{{ _self.tooltip_connected_users(row) | raw }}" class="{% if loop.index is odd %}odd{% else %}even{% endif %} usrTips" id="TREXP_{{ row.getId()}}">
+            <tr title="{{ _self.tooltip_connected_users(row) | e }}" class="{% if loop.index is odd %}odd{% else %}even{% endif %} usrTips" id="TREXP_{{ row.getId()}}">
 
                 {% if row.getId() == app['session'].get('session_id') %}
                     <td style="color:#ff0000"><i>{{ row.getUser().getDisplayName() }}</i></td>