MDL-74204 mod_assign: escape identity fields in allocate marker form.

2022-05-02 12:27:15 +02:00
parent 780a8aa0aa
commit bbd4540075
1 changed files with 1 additions and 1 deletions
@@ -164,7 +164,7 @@ class mod_assign_renderer extends plugin_renderer_base {
            $fullname = fullname($summary->user, $summary->viewfullnames);
            $extrainfo = array();
            foreach ($summary->extrauserfields as $extrafield) {
-                $extrainfo[] = $summary->user->$extrafield;
+                $extrainfo[] = s($summary->user->$extrafield);
            }
            if (count($extrainfo)) {
                $fullname .= ' (' . implode(', ', $extrainfo) . ')';