MDL-49940 mod_survey: Fix XSS on survey module

2015-11-04 18:46:27 +08:00
parent 45ae1da263
commit 31d0bf81af
2 changed files with 2 additions and 2 deletions
@@ -189,7 +189,7 @@ function survey_user_complete($course, $user, $mod, $survey) {
                } else {
                    $answertext = "No answer";
                }
-                $table->data[] = array("<b>$questiontext</b>", $answertext);
+                $table->data[] = array("<b>$questiontext</b>", s($answertext));
            }
            echo html_writer::table($table);

@@ -356,7 +356,7 @@
                       $OUTPUT->user_picture($a, array('courseid'=>$course->id)),
                       "<a href=\"report.php?id=$id&amp;action=student&amp;student=$a->userid\">".fullname($a)."</a>",
                       userdate($a->time),
-                       $answer1, $answer2);
+                       s($answer1), s($answer2));

            }
        }