SCORM MDL-25298 escape html vars correctly - thanks to Xavier Paz for report/fix merged from HEAD

2010-11-25 01:47:48 +00:00
parent 14a4e75ccd
commit a2aa8324a4
1 changed files with 1 additions and 1 deletions
@@ -343,7 +343,7 @@ function scorm_user_complete($course, $user, $mod, $scorm) {
                            $report .= "\t\t\t<li><ul class='$liststyle'>\n";
                            foreach($usertrack as $element => $value) {
                                if (substr($element,0,3) == 'cmi') {
-                                    $report .= '<li>'.$element.' => '.$value.'</li>';
+                                    $report .= '<li>'.$element.' => '.s($value).'</li>';
                                }
                            }
                            $report .= "\t\t\t</ul></li>\n";