From acf717ab77cdff53879e0fb56161c69924990073 Mon Sep 17 00:00:00 2001
From: Paul Holden <paulh@moodle.com>
Date: Tue, 16 Mar 2021 20:55:12 +0000
Subject: [PATCH] MDL-71130 quiz_grading: escape user idnumber on display.

---
 mod/quiz/report/grading/report.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/quiz/report/grading/report.php b/mod/quiz/report/grading/report.php
index ecb0355e547..b64b3a80dd7 100644
--- a/mod/quiz/report/grading/report.php
+++ b/mod/quiz/report/grading/report.php
@@ -430,7 +430,7 @@ class quiz_grading_report extends quiz_default_report {
         $a = new stdClass();
         $a->attempt = $attempt->attempt;
         $a->fullname = fullname($attempt);
-        $a->idnumber = $attempt->idnumber;
+        $a->idnumber = s($attempt->idnumber);
 
         $showidnumbers &= !empty($attempt->idnumber);