From 14d6c90f810865dd4b0970c083b8127419b9759d Mon Sep 17 00:00:00 2001
From: Rajesh Taneja <rajesh@moodle.com>
Date: Tue, 12 Mar 2013 12:27:02 +0800
Subject: [PATCH] MDL-38431 comment: profile url should be escaped, as it's
 used in html

---
 comment/lib.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/comment/lib.php b/comment/lib.php
index d1b6dd57a25..08c43a0e7e3 100644
--- a/comment/lib.php
+++ b/comment/lib.php
@@ -520,7 +520,7 @@ class comment {
             $c->format      = $u->cformat;
             $c->timecreated = $u->ctimecreated;
             $url = new moodle_url('/user/view.php', array('id'=>$u->id, 'course'=>$this->courseid));
-            $c->profileurl = $url->out(false);
+            $c->profileurl = $url->out(true);
             $c->fullname = fullname($u);
             $c->time = userdate($c->timecreated, get_string('strftimerecent', 'langconfig'));
             $c->content = format_text($c->content, $c->format, $formatoptions);