MDL-83357 question: Additional cleaning of filter params

2024-12-04 02:50:19 +00:00
parent f6f8ec2291
commit 10fef0df99
1 changed files with 14 additions and 1 deletions
@@ -229,7 +229,20 @@ function question_build_edit_resources($edittab, $baseurl, $params,
        if (!is_array($params['filter'])) {
            $params['filter'] = json_decode($params['filter'], true);
        }
-        $cleanparams['filter'] = $params['filter'];
+        $cleanparams['filter'] = [];
+        foreach ($params['filter'] as $filterkey => $filtervalue) {
+            if ($filterkey == 'jointype') {
+                $cleanparams['filter']['jointype'] = clean_param($filtervalue, PARAM_INT);
+            } else {
+                $cleanfilter = [
+                    'name' => clean_param($filtervalue['name'], PARAM_ALPHANUM),
+                    'jointype' => clean_param($filtervalue['jointype'], PARAM_INT),
+                    'values' => $filtervalue['values'],
+                    'filteroptions' => $filtervalue['filteroptions'],
+                ];
+                $cleanparams['filter'][$filterkey] = $cleanfilter;
+            }
+        }
    }

    if (isset($params['sortdata'])) {