MDL-66161 output: Escaping fatal error message and URL strings

This commit is contained in:
Michael Hawkins 2019-10-29 16:29:46 +08:00 committed by Jenkins
parent 6d51e13f72
commit aa86441b87

View file

@ -2807,8 +2807,8 @@ EOD;
$output .= $this->header();
}
$message = '<p class="errormessage">' . $message . '</p>'.
'<p class="errorcode"><a href="' . $moreinfourl . '">' .
$message = '<p class="errormessage">' . s($message) . '</p>'.
'<p class="errorcode"><a href="' . s($moreinfourl) . '">' .
get_string('moreinformation') . '</a></p>';
if (empty($CFG->rolesactive)) {
$message .= '<p class="errormessage">' . get_string('installproblem', 'error') . '</p>';