MDL-74204 mod_assign: escape identity fields in allocate marker form.

2022-04-08 12:44:16 +02:00
parent 51206b0790
commit 7e24859635
1 changed files with 1 additions and 1 deletions
@@ -164,7 +164,7 @@ class mod_assign_renderer extends plugin_renderer_base {
            $fullname = fullname($summary->user, $summary->viewfullnames);
            $extrainfo = array();
            foreach ($summary->extrauserfields as $extrafield) {
-                $extrainfo[] = $summary->user->$extrafield;
+                $extrainfo[] = s($summary->user->$extrafield);
            }
            if (count($extrainfo)) {
                $fullname .= ' (' . implode(', ', $extrainfo) . ')';