MDL-35472: Prevent html tags appearing in page titles

Only a problem when formatstringstriptags is disabled

lib/pagelib.php

@@ -1055,6 +1055,7 @@ public function add_body_classes($classes) {
      */
     public function set_title($title) {
         $title = format_string($title);
+        $title = strip_tags($title);
         $title = str_replace('"', '"', $title);
         $this->_title = $title;
     }