From c781bcce9ea0ace6c09c07ba3eea00e9a9fa1ebd Mon Sep 17 00:00:00 2001
From: Jan-Hendrik Willms <tleilax+studip@gmail.com>
Date: Tue, 26 Nov 2024 12:29:56 +0000
Subject: [PATCH] use htmlReady, fixes #4911
Closes #4911
Merge request studip/studip!3686
---
app/controllers/admin/courses.php | 9 +++++----
1 file changed, 5 insertions(+), 4 deletions(-)
diff --git a/app/controllers/admin/courses.php b/app/controllers/admin/courses.php
index 890a9ab0b90..2c140dfc244 100644
--- a/app/controllers/admin/courses.php
+++ b/app/controllers/admin/courses.php
@@ -641,7 +641,7 @@ class Admin_CoursesController extends AuthenticatedController
}
if (in_array('number', $activated_fields)) {
$d['number'] = '<a href="'.URLHelper::getLink('dispatch.php/course/basicdata/view', ['cid' => $course->id]).'">'
- .$course->veranstaltungsnummer
+ . htmlReady($course->veranstaltungsnummer)
.'</a>';
}
if (in_array('avatar', $activated_fields)) {
@@ -651,18 +651,19 @@ class Admin_CoursesController extends AuthenticatedController
}
if (in_array('type', $activated_fields)) {
$semtype = $course->getSemType();
- $d['type'] = $semtype['name'];
+ $d['type'] = htmlReady($semtype['name']);
}
if (in_array('room_time', $activated_fields)) {
$strings = $course->getAllDatesInSemester()->toStringArray();
+ $strings = array_map('htmlReady', $strings);
$d['room_time'] = implode('<br>', $strings) ?: _('nicht angegeben');
}
if (in_array('semester', $activated_fields)) {
- $d['semester'] = $course->semester_text;
+ $d['semester'] = htmlReady($course->semester_text);
$d['semester_sort'] = $course->start_semester ? $course->start_semester->beginn : 0;
}
if (in_array('institute', $activated_fields)) {
- $d['institute'] = $course->home_institut ? $course->home_institut->name : $course->institute;
+ $d['institute'] = htmlReady($course->home_institut ? $course->home_institut->name : $course->institute);
}
if (in_array('requests', $activated_fields)) {
$d['requests'] = '<a href="'.URLHelper::getLink('dispatch.php/course/room_requests', ['cid' => $course->id]).'">'.count($course->room_requests)."</a>";
--
GitLab