X-Git-Url: https://git.openstreetmap.org/rails.git/blobdiff_plain/cf8bd08a66b7a7db92238a8d5a9e8836fda07871..0d70728fe268981c5f6a852d6c3a48915ace48f5:/app/views/message/new.rhtml

diff --git a/app/views/message/new.rhtml b/app/views/message/new.rhtml
index 84b3bfdc8..d66e7caed 100644
--- a/app/views/message/new.rhtml
+++ b/app/views/message/new.rhtml
@@ -1,7 +1,7 @@
 <% display_name = User.find_by_id(params[:user_id]).display_name %>
 <% title = params[:message] ? params[:message][:title] : params[:title] %>
 
-<h2>Send a new message to <%= display_name %></h2>
+<h2>Send a new message to <%= h(display_name) %></h2>
 
 <% if params[:display_name] %>
 <p>Writing a new message to <%= h(params[:display_name]) %></p>