MDL-74204 mod_assign: escape identity fields in allocate marker form.

2022-05-04 04:04:15 +02:00
parent 11b2cc4cb5
commit 6abe964bba
1 changed files with 1 additions and 1 deletions
@@ -168,7 +168,7 @@ class renderer extends \plugin_renderer_base {
            $fullname = fullname($summary->user, $summary->viewfullnames);
            $extrainfo = array();
            foreach ($summary->extrauserfields as $extrafield) {
-                $extrainfo[] = $summary->user->$extrafield;
+                $extrainfo[] = s($summary->user->$extrafield);
            }
            if (count($extrainfo)) {
                $fullname .= ' (' . implode(', ', $extrainfo) . ')';