From 5e7c2325008d0191f941666b5589c08a070ce838 Mon Sep 17 00:00:00 2001
From: Anyon <zoujingli@qq.com>
Date: Wed, 2 Dec 2020 14:15:11 +0800
Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8Dsession=E5=8F=98=E9=87=8Fxss?=
 =?UTF-8?q?=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 app/admin/view/index/index.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/app/admin/view/index/index.html b/app/admin/view/index/index.html
index a3fdc4d69..542666ec6 100644
--- a/app/admin/view/index/index.html
+++ b/app/admin/view/index/index.html
@@ -54,8 +54,8 @@
                     <dd lay-unselect><a data-load="{:url('admin/login/out')}" data-confirm="确定要退出登录吗？"><i class="layui-icon layui-icon-release"></i> 退出登录</a></dd>
                 </dl>
                 <a class="layui-elip">
-                    <img alt="headimg" src="{:session('user.headimg')?:'__ROOT__/static/theme/img/headimg.png'}">
-                    <span>{:session('user.nickname')?:session('user.username')}</span>
+                    <img alt="headimg" src="{:htmlentities(session('user.headimg')?:'__ROOT__/static/theme/img/headimg.png')}">
+                    <span>{:htmlentities(session('user.nickname')?:session('user.username'))}</span>
                 </a>
             </li>
             {else}