escaping api key name

Author: marcelfolaron

app/Domain/Setting/Templates/editCompanySettings.tpl.php

@@ -216,7 +216,7 @@ class="fa fa-cog"></span><?php echo $tpl->__('subtitles.defaults'); ?>
                                             <li><a href="<?= BASE_URL?>/api/delAPIKey/<?= $apiKey['id'] ?>" class="delete"><i class="fa fa-trash"></i> Delete Key</a></li>
                                         </ul>
                                     </div>
-                                    <a href="#/api/apiKey/<?= $apiKey['id'] ?>"><strong><?= $apiKey['firstname'] ?></strong></a><br />
+                                    <a href="#/api/apiKey/<?= $apiKey['id'] ?>"><strong><?= $tpl->escape($apiKey['firstname']) ?></strong></a><br />
                                     lt_<?= $apiKey['username'] ?>***
                                     | <?= $tpl->__('labels.created_on')?>: <?= format($apiKey['createdOn'])->date() ?> | <?= $tpl->__('labels.last_used')?>: <?= format($apiKey['lastlogin'])->date() ?>