L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-71898 mod_quiz: escape user identity fields on override pages.

Browse Source
This commit is contained in:
Paul Holden
2021-07-08 23:32:19 +02:00
committed by Eloy Lafuente (stronk7)
parent ee4a1fb8d4
commit 9360ddef14
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mod/quiz/override_form.php
+1 -1
View File
@@ -236,7 +236,7 @@ class quiz_override_form extends moodleform {
$namefields = [];
foreach ($extrauserfields as $field) {
if (isset($user->$field) && $user->$field !== '') {
$namefields[] = $user->$field;
$namefields[] = s($user->$field);
}
}
if ($namefields) {
mod/quiz/overridedelete.php
+1 -1
View File
@@ -103,7 +103,7 @@ if ($override->groupid) {
// TODO Does not support custom user profile fields (MDL-70456).
foreach (\core_user\fields::for_identity($context, false)->get_required_fields() as $field) {
if (isset($user->$field) && $user->$field !== '') {
$namefields[] = $user->$field;
$namefields[] = s($user->$field);
}
}
if ($namefields) {
mod/quiz/overrides.php
+1 -1
View File
@@ -242,7 +242,7 @@ foreach ($overrides as $override) {
foreach ($extrauserfields as $field) {
$usercell = new html_table_cell();
$usercell->rowspan = count($fields);
$usercell->text = $override->$field;
$usercell->text = s($override->$field);
$usercells[] = $usercell;
}
}