MDL-49941 quiz: mod/quiz:grade should declare RISK_XSS
authorTim Hunt <T.J.Hunt@open.ac.uk>
Tue, 21 Apr 2015 10:03:26 +0000 (11:03 +0100)
committerMr. Jenkins (CiBoT) <cibot@moodle.org>
Tue, 5 May 2015 10:31:13 +0000 (18:31 +0800)
mod/quiz/db/access.php

index 21c29bc..ae31ddb 100644 (file)
@@ -108,7 +108,7 @@ $capabilities = array(
 
     // Manually grade and comment on student attempts at a question.
     'mod/quiz:grade' => array(
-        'riskbitmask' => RISK_SPAM,
+        'riskbitmask' => RISK_SPAM | RISK_XSS,
         'captype' => 'write',
         'contextlevel' => CONTEXT_MODULE,
         'archetypes' => array(