L-electron-Rare/moodle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

MDL-59972 mod_feedback: escape subject when showing the contact form

Browse Source
This commit is contained in:
Marina Glancy
2017-09-04 11:31:15 +08:00
committed by Jun Pataleta
parent 68b925e274
commit e404606458
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
mod/feedback/show_nonrespondents.php
+1 -1
View File
@@ -267,7 +267,7 @@ if (!$students) {
echo '<legend class="ftoggler">'.get_string('send_message', 'feedback').'</legend>';
echo '<div>';
echo '<label for="feedback_subject">'.get_string('subject', 'feedback').'&nbsp;</label>';
echo '<input type="text" id="feedback_subject" size="50" maxlength="255" name="subject" value="'.$subject.'" />';
echo '<input type="text" id="feedback_subject" size="50" maxlength="255" name="subject" value="'.s($subject).'" />';
echo '</div>';
print_textarea(true, 15, 25, 30, 10, "message", $message);
print_string('formathtml');