From 39ae18a2f90fcf392a711dd41f9aa7627f72a762 Mon Sep 17 00:00:00 2001 From: Tim Hunt Date: Tue, 21 Apr 2015 11:03:26 +0100 Subject: [PATCH] MDL-49941 quiz: mod/quiz:grade should declare RISK_XSS --- mod/quiz/db/access.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/mod/quiz/db/access.php b/mod/quiz/db/access.php index 21c29bc790a..ae31ddb7347 100644 --- a/mod/quiz/db/access.php +++ b/mod/quiz/db/access.php @@ -108,7 +108,7 @@ $capabilities = array( // Manually grade and comment on student attempts at a question. 'mod/quiz:grade' => array( - 'riskbitmask' => RISK_SPAM, + 'riskbitmask' => RISK_SPAM | RISK_XSS, 'captype' => 'write', 'contextlevel' => CONTEXT_MODULE, 'archetypes' => array(