MDL-69128 admin: Convert HTML entities when populating tasklogs filter
authorMichael Hawkins <michaelh@moodle.com>
Fri, 26 Jun 2020 02:01:17 +0000 (10:01 +0800)
committerAndrew Nicols <andrew@nicols.co.uk>
Mon, 6 Jul 2020 02:04:03 +0000 (10:04 +0800)
admin/tasklogs.php

index 796f323..a91faa3 100644 (file)
@@ -66,7 +66,7 @@ echo $OUTPUT->header();
 // Output the search form.
 echo $OUTPUT->render_from_template('core_admin/tasklogs', (object) [
     'action' => $pageurl->out(),
 // Output the search form.
 echo $OUTPUT->render_from_template('core_admin/tasklogs', (object) [
     'action' => $pageurl->out(),
-    'filter' => $filter,
+    'filter' => htmlentities($filter),
     'resultfilteroptions' => [
         (object) [
             'value' => -1,
     'resultfilteroptions' => [
         (object) [
             'value' => -1,