MDL-61154 analytics: No escaping for text format url

diff --git a/analytics/classes/local/target/base.php b/analytics/classes/local/target/base.php
index 3e84120..638b18b 100644 (file)
--- a/analytics/classes/local/target/base.php
+++ b/analytics/classes/local/target/base.php
@@ -205,10 +205,10 @@ abstract class base extends \core_analytics\calculable {
                 $message->contexturlname = $message->subject;
                 $message->courseid = $coursecontext->instanceid;
 
-                $message->fullmessage = get_string('insightinfomessage', 'analytics', $insighturl->out());
+                $message->fullmessage = get_string('insightinfomessage', 'analytics', $insighturl->out(false));
                 $message->fullmessageformat = FORMAT_PLAIN;
                 $message->fullmessagehtml = get_string('insightinfomessagehtml', 'analytics', $insighturl->out());
-                $message->smallmessage = get_string('insightinfomessage', 'analytics', $insighturl->out());
+                $message->smallmessage = get_string('insightinfomessage', 'analytics', $insighturl->out(false));
                 $message->contexturl = $insighturl->out(false);
 
                 message_send($message);