MDL-49941 quiz: mod/quiz:grade should declare RISK_XSS

moodle · May 5, 2015 · 10c2b92 · 10c2b92
1 parent d938689
commit 10c2b92
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mod/quiz/db/access.php b/mod/quiz/db/access.php
@@ -108,7 +108,7 @@
 
     // Manually grade and comment on student attempts at a question.
     'mod/quiz:grade' => array(
-        'riskbitmask' => RISK_SPAM,
+        'riskbitmask' => RISK_SPAM | RISK_XSS,
         'captype' => 'write',
         'contextlevel' => CONTEXT_MODULE,
         'archetypes' => array(