From 2547042fe6e8ec43331b8681f6f22ce72aee5bc7 Mon Sep 17 00:00:00 2001 From: Jerome Mouneyrac Date: Thu, 12 Apr 2012 14:44:16 +0800 Subject: [PATCH] MDL-31694 Fix XSS security issue with service name accepting javascript --- admin/webservice/forms.php | 1 + 1 file changed, 1 insertion(+) diff --git a/admin/webservice/forms.php b/admin/webservice/forms.php index 96e53c6b685..de96d826672 100644 --- a/admin/webservice/forms.php +++ b/admin/webservice/forms.php @@ -63,6 +63,7 @@ class external_service_form extends moodleform { $mform->addElement('text', 'name', get_string('name')); $mform->addRule('name', get_string('required'), 'required', null, 'client'); + $mform->setType('name', PARAM_TEXT); $mform->addElement('advcheckbox', 'enabled', get_string('enabled', 'webservice')); $mform->addElement('advcheckbox', 'restrictedusers', get_string('restrictedusers', 'webservice'));