Skip to content

Commit 814049e

Browse files
committed
Escape gradebook name in gradebook_list.php to avoid XSS - refs #2746
1 parent 15e49c1 commit 814049e

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

main/template/default/admin/gradebook_list.tpl

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@
1515
{% for item in gradebook_list %}
1616
<tr>
1717
<td>
18-
{{ item.name }}
18+
{{ item.name | e }}
1919
</td>
2020
<td>
2121
{{ item.courseCode }}

0 commit comments

Comments
 (0)