MDL-71130 quiz_grading: escape user idnumber on display.

moodle · May 4, 2021 · f40dfdf · f40dfdf
1 parent eaa157d
commit f40dfdf
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/mod/quiz/report/grading/report.php b/mod/quiz/report/grading/report.php
@@ -665,7 +665,7 @@ protected function get_question_heading($attempt, $shownames, $showidnumbers) {
         $a = new stdClass();
         $a->attempt = $attempt->attempt;
         $a->fullname = fullname($attempt);
-        $a->idnumber = $attempt->idnumber;
+        $a->idnumber = s($attempt->idnumber);
 
         $showidnumbers = $showidnumbers && !empty($attempt->idnumber);