missing htmlSpecialChars() in INPUT's value

moodle · Oct 2, 2004 · 833b9fd · 833b9fd
1 parent 1721518
commit 833b9fd
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/mod/quiz/questiontypes/shortanswer/questiontype.php b/mod/quiz/questiontypes/shortanswer/questiontype.php
@@ -99,7 +99,7 @@ function save_question_options($question) {
             return true;
         }
     }
-    
+
     function print_question_formulation_and_controls($question,
             $quiz, $readonly, $answers, $correctanswers, $nameprefix) {
     /// This implementation is also used by question type NUMERICAL
@@ -115,7 +115,7 @@ function print_question_formulation_and_controls($question,
 
         $stranswer = get_string("answer", "quiz");
         if (isset($question->response[$nameprefix])) {
-            $value = ' value="'.$question->response[$nameprefix].'" ';
+            $value = ' value="'.htmlSpecialChars($question->response[$nameprefix]).'" ';
         } else {
             $value = ' value="" ';
         }