MDL-66762 user: escape extra/email user fields.

This commit is contained in:
Paul Holden 2019-10-07 17:33:48 +01:00 committed by Adrian Greeve
parent eb9f830604
commit 7455b741c9
11 changed files with 14 additions and 17 deletions

View file

@ -581,7 +581,7 @@ abstract class user_selector_base {
if ($this->extrafields) {
$displayfields = array();
foreach ($this->extrafields as $field) {
$displayfields[] = $user->{$field};
$displayfields[] = s($user->{$field});
}
$out .= ' (' . implode(', ', $displayfields) . ')';
}