MDL-50709 groups: Prevent XSS in grouping description
This commit is contained in:
committed by
Eloy Lafuente (stronk7)
parent
9e66dff06c
commit
fa5a3cdedc
@@ -206,7 +206,6 @@ foreach ($members as $gpgid=>$groupdata) {
|
||||
echo $OUTPUT->heading($groupings[$gpgid]->formattedname, 3);
|
||||
$description = file_rewrite_pluginfile_urls($groupings[$gpgid]->description, 'pluginfile.php', $context->id, 'grouping', 'description', $gpgid);
|
||||
$options = new stdClass;
|
||||
$options->noclean = true;
|
||||
$options->overflowdiv = true;
|
||||
echo $OUTPUT->box(format_text($description, $groupings[$gpgid]->descriptionformat, $options), 'generalbox boxwidthnarrow boxaligncenter');
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user