MDL-63215 block_rss_client: Escaping tags in RSS entries
authorMichelle Melton <meltonml@appstate.edu>
Mon, 27 Aug 2018 19:06:48 +0000 (21:06 +0200)
committerLuca Bösch <luca.boesch@bfh.ch>
Sun, 16 Sep 2018 21:49:15 +0000 (23:49 +0200)
blocks/rss_client/classes/output/item.php

index e988304..4bb603a 100644 (file)
@@ -131,7 +131,7 @@ class item implements \renderable, \templatable {
         }
 
         // Allow the renderer to format the title and description.
-        $data['title']          = $output->format_title($title);
+        $data['title']          = strip_tags($output->format_title($title));
         $data['description']    = $this->showdescription ? $output->format_description($this->description) : null;
 
         return $data;