Permalink
Browse files

Escape gradebook name in gradebook_list.php to avoid XSS - refs #2746

  • Loading branch information...
ywarnier committed Dec 3, 2018
1 parent 15e49c1 commit 814049e5bd5317d761dda0ebbbc519cb2a64ab6c
Showing with 1 addition and 1 deletion.
  1. +1 −1 main/template/default/admin/gradebook_list.tpl
@@ -15,7 +15,7 @@
{% for item in gradebook_list %}
<tr>
<td>
{{ item.name }}
{{ item.name | e }}
</td>
<td>
{{ item.courseCode }}

0 comments on commit 814049e

Please sign in to comment.