From fa5a3cdedcd92bd96881fa89a6ff5efd80bd3512 Mon Sep 17 00:00:00 2001 From: John Okely Date: Tue, 28 Jul 2015 17:00:04 +0800 Subject: [PATCH] MDL-50709 groups: Prevent XSS in grouping description --- group/overview.php | 1 - 1 file changed, 1 deletion(-) diff --git a/group/overview.php b/group/overview.php index 6d114c58c4a..173ab922f6d 100644 --- a/group/overview.php +++ b/group/overview.php @@ -206,7 +206,6 @@ foreach ($members as $gpgid=>$groupdata) { echo $OUTPUT->heading($groupings[$gpgid]->formattedname, 3); $description = file_rewrite_pluginfile_urls($groupings[$gpgid]->description, 'pluginfile.php', $context->id, 'grouping', 'description', $gpgid); $options = new stdClass; - $options->noclean = true; $options->overflowdiv = true; echo $OUTPUT->box(format_text($description, $groupings[$gpgid]->descriptionformat, $options), 'generalbox boxwidthnarrow boxaligncenter'); }