MDL-46227 Fix XSS in scheduled tasks
authorSkylar Kelty <S.Kelty@kent.ac.uk>
Wed, 2 Jul 2014 07:35:24 +0000 (08:35 +0100)
committerMarina Glancy <marina@moodle.com>
Tue, 8 Jul 2014 05:37:13 +0000 (13:37 +0800)
admin/tool/task/scheduledtasks.php

index 768d4bc..3963aaf 100644 (file)
@@ -104,11 +104,11 @@ if ($mform && ($mform->is_cancelled() || !empty($CFG->preventscheduledtaskchange
 
 } else {
     echo $OUTPUT->header();
-    $error = optional_param('error', '', PARAM_RAW);
+    $error = optional_param('error', '', PARAM_NOTAG);
     if ($error) {
         echo $OUTPUT->notification($error, 'notifyerror');
     }
-    $success = optional_param('success', '', PARAM_RAW);
+    $success = optional_param('success', '', PARAM_NOTAG);
     if ($success) {
         echo $OUTPUT->notification($success, 'notifysuccess');
     }