MDL-81062 mod_lesson: escape identity fields in overview report.

2024-04-17 03:23:20 +00:00
parent 1d0f426d97
commit 915e3007a8
1 changed files with 1 additions and 1 deletions
@@ -1063,7 +1063,7 @@ function lesson_get_overview_report_table_and_data(lesson $lesson, $currentgroup
            $row = [$studentname];

            foreach ($extrafields as $field) {
-                $row[] = $student->$field;
+                $row[] = s($student->$field);
            }

            $row[] = $attempts;