Clean error messages just in case scripts have been injected

2004-10-01 02:23:44 +00:00
parent 9022e87436
commit 21ba61c3cf
1 changed files with 3 additions and 0 deletions
@@ -2217,6 +2217,9 @@ function error ($message, $link="") {

    print_header(get_string("error"));
    echo "<br />";
+
+    $message = clean_text($message);   // In case nasties are in here
+
    print_simple_box($message, "center", "", "#FFBBBB");

    if (!$link) {