From 5f4d28ccf9c56e01b699f9bc60be1048ec456548 Mon Sep 17 00:00:00 2001
From: moodler <moodler>
Date: Thu, 20 Dec 2007 01:50:38 +0000
Subject: [PATCH] MDL-7493 further fix: strip_tags from title strings because
 the titles may have HTML in them.

---
 blocks/moodleblock.class.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/blocks/moodleblock.class.php b/blocks/moodleblock.class.php
index 47ce5769375..86e01b53a7a 100644
--- a/blocks/moodleblock.class.php
+++ b/blocks/moodleblock.class.php
@@ -291,8 +291,8 @@ class block_base {
         if (!empty($CFG->allowuserblockhiding)) {
             //Accessibility: added 'alt' text for the +- icon.
             //Theme the buttons using, Admin - Miscellaneous - smartpix.
-            $strshow = addslashes_js(get_string('showblocka', 'access', $this->title));
-            $strhide = addslashes_js(get_string('hideblocka', 'access', $this->title));
+            $strshow = addslashes_js(get_string('showblocka', 'access', strip_tags($this->title)));
+            $strhide = addslashes_js(get_string('hideblocka', 'access', strip_tags($this->title)));
             $title .= '<input type="image" src="'.$CFG->pixpath.'/t/switch_minus.gif" '. 
                 'id="togglehide_inst'.$this->instance->id.'" '.
                 'onclick="elementToggleHide(this, true, function(el) {'.