Course home: Don't allow custom icon for plugin-authoring tool - refs BT#19464

4 years ago · 1f2b918f5e
parent 0ef84e50b6
commit 1f2b918f5e
1 changed files with 4 additions and 0 deletions
--- a/main/course_info/tools.php
+++ b/main/course_info/tools.php
@ -121,6 +121,10 @@ switch ($action) {
        $iconsTools .= Display::page_header(get_lang('CustomizeIcons'), null, 'h4');
        $iconsTools .= '<div class="row">';
        foreach ($toolList as $tool) {
+            if (str_contains($tool['link'], '../plugin/')) {
+                continue;
+            }
+
            $tool['name'] = Security::remove_XSS(stripslashes($tool['name']));
            $toolIconName = 'Tool'.api_underscore_to_camel_case($tool['name']);
            $toolIconName = isset($$toolIconName) ? get_lang($toolIconName) : $tool['name'];