From d199358154f574b0b142bb60c76b5ee7714a6f1f Mon Sep 17 00:00:00 2001
From: Tymur Biedukhin <tymur.biedukhin@bigcommerce.com>
Date: Mon, 15 Jun 2020 12:45:49 +0300
Subject: [PATCH] =?UTF-8?q?fix(STRF):=20STRF-7591=20Storefront=20-=20?=
 =?UTF-8?q?=E2=80=9C&=E2=80=9D=20displays=20as=20=E2=80=9C\&amp;=E2=80=9D?=
 =?UTF-8?q?=20under=20account=20>=20orders=20>=20Ship/Bill=20to?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 templates/pages/account/orders/details.html | 24 ++++++++++-----------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/templates/pages/account/orders/details.html b/templates/pages/account/orders/details.html
index 4d856b5373..665882d4a5 100644
--- a/templates/pages/account/orders/details.html
+++ b/templates/pages/account/orders/details.html
@@ -55,12 +55,12 @@ <h3 class="account-heading">{{lang 'account.orders.details.order_details'}}</h3>
                 <section class="account-sidebar-block">
                     <h3 class="account-heading">{{lang 'account.orders.details.ship_to'}}</h3>
                     <ul class="account-order-address">
-                        <li>{{order.shipping_address.full_name}}</li>
-                        <li>{{order.shipping_address.company}}</li>
-                        <li>{{order.shipping_address.address_lines.[0]}}</li>
-                        <li>{{order.shipping_address.address_lines.[1]}}</li>
-                        <li>{{order.shipping_address.city}}, {{order.shipping_address.state}} {{order.shipping_address.zip}}</li>
-                        <li>{{order.shipping_address.country}}</li>
+                        <li>{{{ sanitize order.shipping_address.full_name}}}</li>
+                        <li>{{{ sanitize order.shipping_address.company}}}</li>
+                        <li>{{{ sanitize order.shipping_address.address_lines.[0]}}}</li>
+                        <li>{{{ sanitize order.shipping_address.address_lines.[1]}}}</li>
+                        <li>{{{ sanitize order.shipping_address.city}}}, {{{ sanitize order.shipping_address.state}}} {{{ sanitize order.shipping_address.zip}}}</li>
+                        <li>{{{ sanitize order.shipping_address.country}}}</li>
                     </ul>
                 </section>
             {{else}}
@@ -77,12 +77,12 @@ <h3 class="account-heading">{{lang 'account.orders.details.ship_to'}}</h3>
             <section class="account-sidebar-block">
                 <h3 class="account-heading">{{lang 'account.orders.details.bill_to'}}</h3>
                 <ul class="account-order-address">
-                    <li>{{order.billing_address.full_name}}</li>
-                    <li>{{order.billing_address.company}}</li>
-                    <li>{{order.billing_address.address_lines.[0]}}</li>
-                    <li>{{order.billing_address.address_lines.[1]}}</li>
-                    <li>{{order.billing_address.city}}, {{order.billing_address.state}} {{order.billing_address.zip}}</li>
-                    <li>{{order.billing_address.country}}</li>
+                    <li>{{{ sanitize order.billing_address.full_name}}}</li>
+                    <li>{{{ sanitize order.billing_address.company}}}</li>
+                    <li>{{{ sanitize order.billing_address.address_lines.[0]}}}</li>
+                    <li>{{{ sanitize order.billing_address.address_lines.[1]}}}</li>
+                    <li>{{{ sanitize order.billing_address.city}}}, {{{ sanitize order.billing_address.state}}} {{{ sanitize order.billing_address.zip}}}</li>
+                    <li>{{{ sanitize order.billing_address.country}}}</li>
                 </ul>
             </section>