MDL-23872 Forms Library : Updated MoodleQuickForm to honour setConstant(), prevents injection.

2011-08-10 15:22:07 +08:00
parent 80eb52c415
commit 339c198ade
1 changed files with 4 additions and 0 deletions
@@ -1574,6 +1574,10 @@ class MoodleQuickForm extends HTML_QuickForm_DHTMLRulesTableless {
            }
        }

+        if (is_array($this->_constantValues)) {
+            $unfiltered = HTML_QuickForm::arrayMerge($unfiltered, $this->_constantValues);
+        }
+
        return $unfiltered;
    }
    /**