@@ -3372,7 +3372,7 @@ public static function display_special_courses($user_id, $load_dirs = false)
3372
3372
$ course ['status ' ] = STUDENT ;
3373
3373
}
3374
3374
3375
- $ params ['icon ' ] = Display::return_icon ('blackboard.png ' , $ course_info ['title ' ], array (), ICON_SIZE_LARGE );
3375
+ $ params ['icon ' ] = Display::return_icon ('blackboard.png ' , api_htmlentities ( $ course_info ['title ' ]) , array (), ICON_SIZE_LARGE );
3376
3376
3377
3377
$ params ['right_actions ' ] = '' ;
3378
3378
if (api_is_platform_admin ()) {
@@ -3448,7 +3448,7 @@ public static function display_courses($user_id, $load_dirs = false)
3448
3448
while ($ row = Database::fetch_array ($ result )) {
3449
3449
// We simply display the title of the category.
3450
3450
$ params = array (
3451
- 'icon ' => Display::return_icon ('folder_yellow.png ' , $ row ['title ' ], array (), ICON_SIZE_LARGE ),
3451
+ 'icon ' => Display::return_icon ('folder_yellow.png ' , api_htmlentities ( $ row ['title ' ]) , array (), ICON_SIZE_LARGE ),
3452
3452
'title ' => $ row ['title ' ],
3453
3453
'class ' => 'table_user_course_category '
3454
3454
);
@@ -3542,7 +3542,7 @@ public static function display_courses_in_category($user_category_id, $load_dirs
3542
3542
$ show_notification = Display::show_notification ($ course_info );
3543
3543
3544
3544
// New code displaying the user's status in respect to this course.
3545
- $ status_icon = Display::return_icon ('blackboard.png ' , $ course_info ['title ' ], array (), ICON_SIZE_LARGE );
3545
+ $ status_icon = Display::return_icon ('blackboard.png ' , api_htmlentities ( $ course_info ['title ' ]) , array (), ICON_SIZE_LARGE );
3546
3546
3547
3547
$ params = array ();
3548
3548
$ params ['right_actions ' ] = '' ;
@@ -3741,7 +3741,7 @@ public static function get_logged_user_course_html($course, $session_id = 0, $cl
3741
3741
}
3742
3742
3743
3743
$ params = array ();
3744
- $ params ['icon ' ] = Display::return_icon ('blackboard_blue.png ' , $ course_info ['name ' ], array (), ICON_SIZE_LARGE );
3744
+ $ params ['icon ' ] = Display::return_icon ('blackboard_blue.png ' , api_htmlentities ( $ course_info ['name ' ]) , array (), ICON_SIZE_LARGE );
3745
3745
$ params ['link ' ] = $ session_url ;
3746
3746
$ params ['title ' ] = $ session_title ;
3747
3747
0 commit comments