From b665e5aa333bf37eb877d5db5c44b9d4bae01d4e Mon Sep 17 00:00:00 2001
From: Paul Holden <paulh@moodle.com>
Date: Tue, 16 Mar 2021 20:18:38 +0000
Subject: [PATCH] MDL-71128 mod_quiz: escape question idnumber on display.

---
 mod/quiz/locallib.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/quiz/locallib.php b/mod/quiz/locallib.php
index a799e0f55b2..777f70d49a9 100644
--- a/mod/quiz/locallib.php
+++ b/mod/quiz/locallib.php
@@ -2069,7 +2069,7 @@ function quiz_question_tostring($question, $showicon = false, $showquestiontext
     if ($showidnumber && $question->idnumber !== null && $question->idnumber !== '') {
         $result .= ' ' . html_writer::span(
                 html_writer::span(get_string('idnumber', 'question'), 'accesshide') .
-                ' ' . $question->idnumber, 'badge badge-primary');
+                ' ' . s($question->idnumber), 'badge badge-primary');
     }
 
     // Question tags.