From 45f3b5302d645ba13ca8b68b0106a638ebd21980 Mon Sep 17 00:00:00 2001 From: John Okely Date: Tue, 28 Jul 2015 17:00:04 +0800 Subject: [PATCH] MDL-50709 groups: Prevent XSS in grouping description --- group/overview.php | 1 - 1 file changed, 1 deletion(-) diff --git a/group/overview.php b/group/overview.php index dd8f84776ea..3926c43418c 100644 --- a/group/overview.php +++ b/group/overview.php @@ -206,7 +206,6 @@ foreach ($members as $gpgid=>$groupdata) { echo $OUTPUT->heading($groupings[$gpgid]->formattedname, 3); $description = file_rewrite_pluginfile_urls($groupings[$gpgid]->description, 'pluginfile.php', $context->id, 'grouping', 'description', $gpgid); $options = new stdClass; - $options->noclean = true; $options->overflowdiv = true; echo $OUTPUT->box(format_text($description, $groupings[$gpgid]->descriptionformat, $options), 'generalbox boxwidthnarrow boxaligncenter'); }