MDL-66762 user: escape extra/email user fields.

This commit is contained in:
Paul Holden 2019-10-07 17:33:48 +01:00 committed by Adrian Greeve
parent eb9f830604
commit 7455b741c9
11 changed files with 14 additions and 17 deletions

View file

@ -767,7 +767,7 @@ class grade_report_grader extends grade_report {
$fieldcell = new html_table_cell();
$fieldcell->attributes['class'] = 'userfield user' . $field;
$fieldcell->header = false;
$fieldcell->text = $user->{$field};
$fieldcell->text = s($user->{$field});
$userrow->cells[] = $fieldcell;
}