MDL-71130 quiz_grading: escape user idnumber on display.
authorPaul Holden <paulh@moodle.com>
Tue, 16 Mar 2021 20:55:12 +0000 (20:55 +0000)
committerJenkins <jenkins@worker11.test.in.moodle.com>
Tue, 4 May 2021 15:23:11 +0000 (17:23 +0200)
mod/quiz/report/grading/report.php

index 9c9abbb..1022590 100644 (file)
@@ -665,7 +665,7 @@ class quiz_grading_report extends quiz_default_report {
         $a = new stdClass();
         $a->attempt = $attempt->attempt;
         $a->fullname = fullname($attempt);
-        $a->idnumber = $attempt->idnumber;
+        $a->idnumber = s($attempt->idnumber);
 
         $showidnumbers = $showidnumbers && !empty($attempt->idnumber);