- <td><a href="{{ site_url }}"><img src="{{ email.image(site_logo) }}" alt="{{ site_title|trans }}" /></a></td>
- <td><h1><a href="{{ site_url }}">{{ site_title|trans }}</a></h1></td>
+ <td><a href="{{ site_url|escape('html_attr') }}"><img src="{{ email.image(site_logo) }}" alt="{{ site_title|escape('html_attr') }}" /></a></td>
+ <td><h1><a href="{{ site_url|escape('html_attr') }}">{{ site_title }}</a></h1></td>