MDL-58027 files: Restored missing htmlentities() call

scara · Mar 13, 2017 · bf4f857 · bf4f857
1 parent 1034421
commit bf4f857
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/filelib.php b/lib/filelib.php
@@ -2264,7 +2264,7 @@ function send_file($path, $filename, $lifetime = null , $filter=0, $pathisstring
             $options->newlines = false;
             $options->noclean = true;
             if (is_object($path)) {
-                $text = $path->get_content();
+                $text = htmlentities($path->get_content(), ENT_QUOTES, 'UTF-8');
             } else if ($pathisstring) {
                 $text = htmlentities($path, ENT_QUOTES, 'UTF-8');
             } else {