MDL-57596 forms: CLEANHTML in persistent forms

Add special handling for text fields with the CLEANHTML type. This should be used when students and teachers can edit the same field (you can't trust those students). Applies cleaning on submitted data, and on data stored in the DB before it is put back in an editing form.
2017-03-10 18:07:55 +00:00
parent ca3cbbc233
commit 3cc4e2f725
13 changed files with 25 additions and 13 deletions
@@ -68,7 +68,7 @@ class competency extends persistent {
            ),
            'description' => array(
                'default' => '',
-                'type' => PARAM_RAW
+                'type' => PARAM_CLEANHTML
            ),
            'descriptionformat' => array(
                'choices' => array(FORMAT_HTML, FORMAT_MOODLE, FORMAT_PLAIN, FORMAT_MARKDOWN),