Commit 3134fe14 authored by Yuliya Bozhko's avatar Yuliya Bozhko Committed by Gerrit Code Review

Escape institution full name on user profile page (Bug #1381868)

Change-Id: I3b8385415b20af742f4e55e558b6613627e6676a
Signed-off-by: default avatarYuliya Bozhko <yuliya.bozhko@totaralms.com>
parent 259acad0
......@@ -2006,7 +2006,7 @@ function get_institution_strings_for_users($userids) {
$links = array();
foreach ($value as $k => $v) {
$url = get_config('wwwroot').'institution/index.php?institution='.$k;
$links[] = get_string('institutionlink', 'mahara', $url, $v);
$links[] = get_string('institutionlink', 'mahara', $url, hsc($v));
}
switch ($key) {
case 'admin':
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment