MDL-76861 blog: Ensure correct escaping applied to search string

moodle · Jan 12, 2023 · 044e23f · 044e23f
1 parent 8a55634
commit 044e23f
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/blog/lib.php b/blog/lib.php
@@ -903,7 +903,7 @@ function blog_get_headers($courseid=null, $groupid=null, $userid=null, $tagid=nu
         if (!empty($search) && has_capability('moodle/blog:search', $sitecontext)) {
             $headers['filters']['search'] = $search;
             $blogurl->param('search', $search);
-            $PAGE->navbar->add(get_string('searchterm', 'blog', $search), $blogurl->out());
+            $PAGE->navbar->add(get_string('searchterm', 'blog', s($search)), $blogurl->out());
         }
     }