diff --git a/mod/quiz/classes/output/renderer.php b/mod/quiz/classes/output/renderer.php
index c3281f3d5dd..f0f5fd952ce 100644
--- a/mod/quiz/classes/output/renderer.php
+++ b/mod/quiz/classes/output/renderer.php
@@ -247,7 +247,7 @@ class renderer extends plugin_renderer_base {
 
         if ($attemptobj->get_access_manager(time())->attempt_must_be_in_popup()) {
             $this->page->requires->js_init_call('M.mod_quiz.secure_window.init_close_button',
-                    [$url], false, quiz_get_js_module());
+                    [$url->out(false)], false, quiz_get_js_module());
             return html_writer::empty_tag('input', ['type' => 'button',
                     'value' => get_string('finishreview', 'quiz'),
                     'id' => 'secureclosebutton',
diff --git a/mod/quiz/locallib.php b/mod/quiz/locallib.php
index c667ca899f9..75c8c7fed07 100644
--- a/mod/quiz/locallib.php
+++ b/mod/quiz/locallib.php
@@ -1457,7 +1457,7 @@ function quiz_send_overdue_message($attemptobj) {
     $a->courseshortname    = format_string($attemptobj->get_course()->shortname);
     // Quiz info.
     $a->quizname           = $quizname;
-    $a->quizurl            = $attemptobj->view_url();
+    $a->quizurl            = $attemptobj->view_url()->out(false);
     $a->quizlink           = '<a href="' . $a->quizurl . '">' . $quizname . '</a>';
     // Attempt info.
     $a->attemptduedate     = userdate($duedate);