From 21ba61c3cfa8b749d1f89104fa557433736f4a85 Mon Sep 17 00:00:00 2001
From: moodler <moodler>
Date: Fri, 1 Oct 2004 02:23:44 +0000
Subject: [PATCH] Clean error messages just in case scripts have been injected

---
 lib/weblib.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/lib/weblib.php b/lib/weblib.php
index ce456f02558..e4efe8d4729 100644
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -2217,6 +2217,9 @@ function error ($message, $link="") {
 
     print_header(get_string("error"));
     echo "<br />";
+
+    $message = clean_text($message);   // In case nasties are in here
+
     print_simple_box($message, "center", "", "#FFBBBB");
 
     if (!$link) {