diff --git a/admin/roles/classes/preset.php b/admin/roles/classes/preset.php index 85904eb126a..256f635d5ba 100644 --- a/admin/roles/classes/preset.php +++ b/admin/roles/classes/preset.php @@ -71,8 +71,9 @@ class core_role_preset { $dom->appendChild($top); $top->appendChild($dom->createElement('shortname', $role->shortname)); - $top->appendChild($dom->createElement('name', $role->name)); - $top->appendChild($dom->createElement('description', $role->description)); + $top->appendChild($dom->createElement('name', htmlspecialchars($role->name, ENT_COMPAT | ENT_HTML401, 'UTF-8'))); + $top->appendChild($dom->createElement('description', htmlspecialchars($role->description, ENT_COMPAT | ENT_HTML401, + 'UTF-8'))); $top->appendChild($dom->createElement('archetype', $role->archetype)); $contextlevels = $dom->createElement('contextlevels');