From b47b680e9d7f0fb7131bcd6c3212640072a2450a Mon Sep 17 00:00:00 2001
From: Tibinsunny <tibinsunny95@gmail.com>
Date: Sat, 29 Aug 2020 22:33:01 -0700
Subject: [PATCH] Fix for /issues/1254

---
 bl-kernel/admin/views/login.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bl-kernel/admin/views/login.php b/bl-kernel/admin/views/login.php
index dfab0a35..4c5798d6 100644
--- a/bl-kernel/admin/views/login.php
+++ b/bl-kernel/admin/views/login.php
@@ -11,7 +11,7 @@ echo Bootstrap::formOpen(array());
 
 	echo '
 	<div class="form-group">
-		<input type="text" value="'.(isset($_POST['username'])?$_POST['username']:'').'" class="form-control form-control-lg" id="jsusername" name="username" placeholder="'.$L->g('Username').'" autofocus>
+		<input type="text" value="'.(isset($_POST['username'])?htmlspecialchars($_POST['username']):'').'" class="form-control form-control-lg" id="jsusername" name="username" placeholder="'.$L->g('Username').'" autofocus>
 	</div>
 	';