From e35ad40de18b60c8254f171cac8cf3ab376cd7d1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?David=20Mudr=C3=A1k?= <david@moodle.com>
Date: Mon, 13 Feb 2017 22:49:33 +0100
Subject: [PATCH] MDL-57597 competency: Fix serving of prior learning evidence
 files

For security reasons, all files submitted by students must be disposed
as attachments, not inline contents.
---
 competency/lib.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/competency/lib.php b/competency/lib.php
index 7472db1dc27..3918da6480b 100644
--- a/competency/lib.php
+++ b/competency/lib.php
@@ -290,6 +290,7 @@ function core_competency_pluginfile($course, $cm, $context, $filearea, $args, $f
     if ($filearea == 'userevidence' && $context->contextlevel == CONTEXT_USER) {
         if (user_evidence::can_read_user($context->instanceid)) {
             $file = $fs->get_file($context->id, 'core_competency', $filearea, $itemid, $filepath, $filename);
+            $forcedownload = true;
         }
     }