PHRAS-3522 fix uninterpreted html in notification

lib/classes/eventsmanager/notify/validate.php

@@ -56,11 +56,11 @@ class eventsmanager_notify_validate extends eventsmanager_notifyAbstract
         $bask_link = '<a href="'
             . $this->app->url('lightbox_validation', ['basket' => $ssel_id])
             . '" target="_blank">'
-            . $basket_name . '</a>';
+            . htmlentities($basket_name) . '</a>';
 
         $ret = [
             'text'  => $this->app->trans('%user% vous demande de valider %title%', [
-                '%user%' => $sender,
+                '%user%' => htmlentities($sender),
                 '%title%' => $bask_link,
             ])
             , 'class' => ($unread == 1 ? 'reload_baskets' : '')