From e894f95f6cec8edf09e8a3074dc56c464d2481bf Mon Sep 17 00:00:00 2001
From: Jun Pataleta <jun@moodle.com>
Date: Fri, 16 May 2025 16:41:03 +0800
Subject: [PATCH] MDL-85504 form: Legend's label template data should not be
 escaped

The label context data in the fieldset's legend tag should not be
escaped and allow raw HTML given that legend tags can contain
phrasing content and headings.

See developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/legend.
---
 lib/form/templates/element-group.mustache | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/form/templates/element-group.mustache b/lib/form/templates/element-group.mustache
index 901fbb7b88d..d2bebbaa312 100644
--- a/lib/form/templates/element-group.mustache
+++ b/lib/form/templates/element-group.mustache
@@ -9,7 +9,7 @@
     {{$element}}
         {{#label}}
             <fieldset class="w-100 m-0 p-0 border-0">
-                <legend class="sr-only">{{label}}</legend>
+                <legend class="sr-only">{{{label}}}</legend>
                 <div class="d-flex flex-wrap align-items-center">
                 {{#element.elements}}
                     {{{separator}}}