moodle/moodle
3
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-08-08 10:26:40 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

MDL-37896 qtype_essay: correct PARAM_CLEANHTML -> PARAM_RAW.

Browse source 
It turns out that you should almost never use PARAM_CLEANHTML.
This commit is contained in:
Tim Hunt 2013-02-06 17:45:58 +00:00
parent 6319737865
commit 2d2018abda
3 changed files with 9 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

6
lib/moodlelib.php
View file

@ -116,7 +116,11 @@ define('PARAM_BOOL', 'bool');
define('PARAM_CAPABILITY', 'capability');
/**
* PARAM_CLEANHTML - cleans submitted HTML code. use only for text in HTML format. This cleaning may fix xhtml strictness too.
* PARAM_CLEANHTML - cleans submitted HTML code. Note that you almost never want
* to use this. The normal mode of operation is to use PARAM_RAW when recieving
* the input (required/optional_param or formslib) and then sanitse the HTML
* using format_text on output. This is for the rare cases when you want to
* sanitise the HTML on input. This cleaning may also fix xhtml strictness.
*/
define('PARAM_CLEANHTML', 'cleanhtml');