MDL-41941 clean message text

diff --git a/message/lib.php b/message/lib.php
index 8fa3be2..bf9f73f 100644 (file)
--- a/message/lib.php
+++ b/message/lib.php
@@ -2042,6 +2042,8 @@ function message_format_message($message, $format='', $keywords='', $class='othe
 
     $messagetext .= message_format_contexturl($message);
 
+    $messagetext = clean_text($messagetext, FORMAT_HTML);
+
     return <<<TEMPLATE
 <div class='message $class'>
     <a name="m'.{$message->id}.'"></a>