MDL-23872 Forms Library : Updated MoodleQuickForm to honour setConstant(), prevents injection.
This commit is contained in:
committed by
Aparup Banerjee
parent
4b85dc13ac
commit
e39ee61705
@@ -1561,6 +1561,10 @@ class MoodleQuickForm extends HTML_QuickForm_DHTMLRulesTableless {
|
||||
}
|
||||
}
|
||||
|
||||
if (is_array($this->_constantValues)) {
|
||||
$unfiltered = HTML_QuickForm::arrayMerge($unfiltered, $this->_constantValues);
|
||||
}
|
||||
|
||||
return $unfiltered;
|
||||
}
|
||||
/**
|
||||
|
||||
Reference in New Issue
Block a user