From cfd41befd59802c9b438f8a565ffee292fe84e22 Mon Sep 17 00:00:00 2001
From: sam marshall <s.marshall@open.ac.uk>
Date: Mon, 8 Apr 2013 14:53:38 +0100
Subject: [PATCH] MDL-38824 Activity completion: Automatic completion quotes
 not escaped

---
 course/lib.php | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/course/lib.php b/course/lib.php
index b160b19cab3..18576c86307 100644
--- a/course/lib.php
+++ b/course/lib.php
@@ -1679,9 +1679,10 @@ function print_section($course, $section, $mods, $modnamesused, $absolute=false,
                         echo html_writer::end_tag('div');
                         echo html_writer::end_tag('form');
                     } else {
-                        // In auto mode, or when editing, the icon is just an image
-                        echo "<span class='autocompletion'>";
-                        echo "<img src='$imgsrc' alt='$imgalt' title='$imgalt' /></span>";
+                        // In auto mode, or when editing, the icon is just an image.
+                        echo html_writer::tag('span', html_writer::empty_tag('img', array(
+                                'src' => $imgsrc, 'alt' => $imgalt, 'title' => $imgalt)),
+                                array('class' => 'autocompletion'));
                     }
                 }
             }