MDL-48368 course: fix xss on course request pending page

moodle · Jan 5, 2015 · 52ecd1d · 52ecd1d
1 parent da4c33f
commit 52ecd1d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/course/pending.php b/course/pending.php
@@ -116,7 +116,7 @@
         $row[] = format_string($course->shortname);
         $row[] = format_string($course->fullname);
         $row[] = fullname($course->get_requester());
-        $row[] = $course->summary;
+        $row[] = format_text($course->summary, $course->summaryformat);
         $row[] = $category->get_formatted_name();
         $row[] = format_string($course->reason);
         $row[] = $OUTPUT->single_button(new moodle_url($baseurl, array('approve' => $course->id, 'sesskey' => sesskey())), get_string('approve'), 'get') .