missing htmlSpecialChars() in INPUT's value

2004-10-02 18:50:25 +00:00
parent 1721518730
commit 833b9fd8d5
1 changed files with 2 additions and 2 deletions
@@ -99,7 +99,7 @@ class quiz_shortanswer_qtype extends quiz_default_questiontype {
            return true;
        }
    }
-    
+
    function print_question_formulation_and_controls($question,
            $quiz, $readonly, $answers, $correctanswers, $nameprefix) {
    /// This implementation is also used by question type NUMERICAL
@@ -115,7 +115,7 @@ class quiz_shortanswer_qtype extends quiz_default_questiontype {

        $stranswer = get_string("answer", "quiz");
        if (isset($question->response[$nameprefix])) {
-            $value = ' value="'.$question->response[$nameprefix].'" ';
+            $value = ' value="'.htmlSpecialChars($question->response[$nameprefix]).'" ';
        } else {
            $value = ' value="" ';
        }