From 1094b6132326b7e5e47d85597c00049861b04e92 Mon Sep 17 00:00:00 2001
From: Dominic Grimm <dominic@dergrimm.net>
Date: Sun, 5 Mar 2023 15:55:49 +0100
Subject: [PATCH] Update

---
 backend/templates/html/users.html.ecr | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/backend/templates/html/users.html.ecr b/backend/templates/html/users.html.ecr
index c1c7ada..4523dbb 100644
--- a/backend/templates/html/users.html.ecr
+++ b/backend/templates/html/users.html.ecr
@@ -146,7 +146,7 @@
                     <tr>
                       <td>
                         <%- if student.user.password -%>
-                          <code><%= student.user.password %></code>
+                          <code><%= HTML.escape(student.user.password.not_nil!) %></code>
                         <%- else -%>
                           <i>Password geändert</i>
                         <%- end -%>
@@ -196,7 +196,7 @@
                     <tr>
                       <td>
                         <%- if teacher.password -%>
-                          <code><%= teacher.password %></code>
+                          <code><%= HTML.escape(teacher.password.not_nil!) %></code>
                         <%- else -%>
                           <i>Password geändert</i>
                         <%- end -%>