MDL-57447 block_myoverview: escape html content on course summary

Part of MDL-55611 epic.

diff --git a/blocks/myoverview/templates/course-summary.mustache b/blocks/myoverview/templates/course-summary.mustache
index c0a32f7..012784d 100644 (file)
--- a/blocks/myoverview/templates/course-summary.mustache
+++ b/blocks/myoverview/templates/course-summary.mustache
@@ -28,7 +28,7 @@
         "summary": "It is a long established fact that a reader will be distracted by the readable content of a page when looking at its layout."
     }
 }}
-<div class="d-inline-block m-l-1">
+<div class="d-inline-block m-x-1">
     <div class="course-info-container" id="course-info-container-{{id}}">
         <div class="row m-b-1">
             <!-- Will be replaced by the chart after course completion changes are done. -->
@@ -41,7 +41,7 @@
             {{startdate}} - {{enddate}}
         </div>
         <div class="row text-muted">
-            {{summary}}
+            {{{summary}}}
         </div>
     </div>
 </div>
\ No newline at end of file