From e3343c280d5a8afc8d7687fffc0b8953f5d26a15 Mon Sep 17 00:00:00 2001
From: Paul Holden <paulh@moodle.com>
Date: Wed, 26 May 2021 18:12:43 +0100
Subject: [PATCH] MDL-71760 admin: escape identity fields in token management
 table.

---
 webservice/classes/token_table.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/webservice/classes/token_table.php b/webservice/classes/token_table.php
index 9c91c64db54..ad6a54b6b84 100644
--- a/webservice/classes/token_table.php
+++ b/webservice/classes/token_table.php
@@ -151,7 +151,7 @@ class token_table extends \table_sql {
         $identity = [];
 
         foreach ($this->userextrafields as $userextrafield) {
-            $identity[] = $data->$userextrafield;
+            $identity[] = s($data->$userextrafield);
         }
 
         $userprofilurl = new \moodle_url('/user/profile.php', ['id' => $data->userid]);