Permalink
Browse files

SCORM MDL-25298 escape html vars correctly - thanks to Xavier Paz for…

… report/fix
  • Loading branch information...
1 parent 683513d commit a7ab614d3abdc54ec6652acd18a890073f68f8ce @danmarsden danmarsden committed Nov 25, 2010
Showing with 1 addition and 1 deletion.
  1. +1 −1 mod/scorm/lib.php
View
@@ -419,7 +419,7 @@ function scorm_user_complete($course, $user, $mod, $scorm) {
$report .= "\t\t\t<li><ul class='$liststyle'>\n";
foreach($usertrack as $element => $value) {
if (substr($element,0,3) == 'cmi') {
- $report .= '<li>'.$element.' => '.$value.'</li>';
+ $report .= '<li>'.$element.' => '.s($value).'</li>';
}
}
$report .= "\t\t\t</ul></li>\n";

0 comments on commit a7ab614

Please sign in to comment.