SCORM MDL-25298 escape html vars correctly - thanks to Xavier Paz for report/fix

This commit is contained in:
Dan Marsden 2010-11-25 01:32:03 +00:00
parent 683513daee
commit a7ab614d3a

View file

@ -419,7 +419,7 @@ function scorm_user_complete($course, $user, $mod, $scorm) {
$report .= "\t\t\t<li><ul class='$liststyle'>\n";
foreach($usertrack as $element => $value) {
if (substr($element,0,3) == 'cmi') {
$report .= '<li>'.$element.' => '.$value.'</li>';
$report .= '<li>'.$element.' => '.s($value).'</li>';
}
}
$report .= "\t\t\t</ul></li>\n";