From af2d1e28f110d6a12ed7e2923ca7fffc17ecd631 Mon Sep 17 00:00:00 2001
From: Jan-Hendrik Willms <tleilax+studip@gmail.com>
Date: Fri, 30 Sep 2022 11:17:02 +0000
Subject: [PATCH] correctly encode output, fixes #1619
Closes #1619
Merge request studip/studip!1047
---
lib/models/LogEvent.php | 9 ++++-----
1 file changed, 4 insertions(+), 5 deletions(-)
diff --git a/lib/models/LogEvent.php b/lib/models/LogEvent.php
index 38fdd72dfb1..a9c3de93383 100644
--- a/lib/models/LogEvent.php
+++ b/lib/models/LogEvent.php
@@ -240,7 +240,7 @@ class LogEvent extends SimpleORMap implements PrivacyObject
return $this->$field;
}
- return '<em>' . $study_area->getPath(' > ') . '</em>';
+ return '<em>' . htmlReady($study_area->getPath(' > ')) . '</em>';
}
/**
@@ -265,8 +265,7 @@ class LogEvent extends SimpleORMap implements PrivacyObject
$plugin_manager = PluginManager::getInstance();
$plugin_info = $plugin_manager->getPluginInfoById($this->$field);
- return $plugin_info ? '<em>'
- . $plugin_info['name'] . '</em>' : $this->$field;
+ return $plugin_info ? '<em>' . htmlReady($plugin_info['name']) . '</em>' : $this->$field;
}
/**
@@ -280,10 +279,10 @@ class LogEvent extends SimpleORMap implements PrivacyObject
$all_semester = Semester::findAllVisible(false);
foreach ($all_semester as $val) {
if ($val['beginn'] == $this->$field) {
- return '<em>' . $val['name'] . '</em>';
+ return '<em>' . htmlReady($val['name']) . '</em>';
}
}
- return $this->$field;
+ return htmlReady($this->$field);
}
/**
--
GitLab