From cc1eebbb34bdfb8a762b96a84150349eecc08ee2 Mon Sep 17 00:00:00 2001
From: Petr Skoda <skodak@moodle.org>
Date: Thu, 2 Sep 2010 17:55:22 +0000
Subject: [PATCH] MDL-23184 role description accepts any HTML, we have to trust
 people that can edit roles anyway

---
 admin/roles/lib.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/admin/roles/lib.php b/admin/roles/lib.php
index 31ee759eac6..9b0b964e2d7 100644
--- a/admin/roles/lib.php
+++ b/admin/roles/lib.php
@@ -620,7 +620,7 @@ class define_role_table_advanced extends capability_table_with_risks {
         }
 
         // Description.
-        $description = optional_param('description', null, PARAM_CLEAN);
+        $description = optional_param('description', null, PARAM_RAW);
         if (!is_null($description)) {
             $this->role->description = $description;
         }