From bbd454007524d2724255713c7d9ea25a2f48d04d Mon Sep 17 00:00:00 2001
From: Paul Holden <paulh@moodle.com>
Date: Tue, 15 Mar 2022 00:10:25 +0000
Subject: [PATCH] MDL-74204 mod_assign: escape identity fields in allocate
 marker form.

---
 mod/assign/renderer.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/assign/renderer.php b/mod/assign/renderer.php
index eea7fac2a25..05d0c8df6f6 100644
--- a/mod/assign/renderer.php
+++ b/mod/assign/renderer.php
@@ -164,7 +164,7 @@ class mod_assign_renderer extends plugin_renderer_base {
             $fullname = fullname($summary->user, $summary->viewfullnames);
             $extrainfo = array();
             foreach ($summary->extrauserfields as $extrafield) {
-                $extrainfo[] = $summary->user->$extrafield;
+                $extrainfo[] = s($summary->user->$extrafield);
             }
             if (count($extrainfo)) {
                 $fullname .= ' (' . implode(', ', $extrainfo) . ')';