[FIX] crm_livechat: convert leads from livechat discussions

Fixes a7b89070

opw-2078313

X-Original-Commit: 8ab09cad

addons/crm_livechat/models/mail_channel.py

@@ -2,7 +2,7 @@
 # Part of Odoo. See LICENSE file for full copyright and licensing details.
 
 from odoo import models, _
-from odoo.tools import html2plaintext
+from odoo.tools import html2plaintext, html_escape
 
 
 class MailChannel(models.Model):
@@ -22,7 +22,7 @@ class MailChannel(models.Model):
             msg = self._define_command_lead()['help']
         else:
             lead = self._convert_visitor_to_lead(partner, channel_partners, key)
-            msg = _('Created a new lead: <a href="#" data-oe-id="%s" data-oe-model="crm.lead">%s</a>') % (lead.id, lead.name)
+            msg = _('Created a new lead: <a href="#" data-oe-id="%s" data-oe-model="crm.lead">%s</a>') % (lead.id, html_escape(lead.name))
         self._send_transient_message(partner, msg)
 
     def _convert_visitor_to_lead(self, partner, channel_partners, key):