MDL-71615 qbank_deletequestion: Ensure that the returnurl is qualified

moodle · Aug 19, 2021 · 6f36b09 · 6f36b09
1 parent 73754b8
commit 6f36b09
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/question/bank/deletequestion/delete.php b/question/bank/deletequestion/delete.php
@@ -34,6 +34,10 @@
 $cmid = optional_param('cmid', 0, PARAM_INT);
 $courseid = optional_param('courseid', 0, PARAM_INT);
 
+if ($returnurl) {
+    $returnurl = new moodle_url($returnurl);
+}
+
 \core_question\local\bank\helper::require_plugin_enabled('qbank_deletequestion');
 
 if ($cmid) {