From a2aa8324a41e48856c9f4165b1a29f2c5ca21082 Mon Sep 17 00:00:00 2001
From: Dan Marsden <Dan@digitalclay.co.nz>
Date: Thu, 25 Nov 2010 01:47:48 +0000
Subject: [PATCH] SCORM MDL-25298 escape html vars correctly - thanks to Xavier
 Paz for report/fix merged from HEAD

---
 mod/scorm/lib.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/scorm/lib.php b/mod/scorm/lib.php
index a3fded052fb..a19cc49fcd6 100755
--- a/mod/scorm/lib.php
+++ b/mod/scorm/lib.php
@@ -343,7 +343,7 @@ function scorm_user_complete($course, $user, $mod, $scorm) {
                             $report .= "\t\t\t<li><ul class='$liststyle'>\n";
                             foreach($usertrack as $element => $value) {
                                 if (substr($element,0,3) == 'cmi') {
-                                    $report .= '<li>'.$element.' => '.$value.'</li>';
+                                    $report .= '<li>'.$element.' => '.s($value).'</li>';
                                 }
                             }
                             $report .= "\t\t\t</ul></li>\n";