MDL-23872 Forms Library : Updated MoodleQuickForm to honour setConstant(), prevents injection.

2011-08-10 15:17:53 +08:00
parent 3fdc622697
commit f1f70bd4dd
1 changed files with 4 additions and 0 deletions
@@ -1576,6 +1576,10 @@ class MoodleQuickForm extends HTML_QuickForm_DHTMLRulesTableless {
            }
        }

+        if (is_array($this->_constantValues)) {
+            $unfiltered = HTML_QuickForm::arrayMerge($unfiltered, $this->_constantValues);
+        }
+
        return $unfiltered;
    }
    /**