Session: add remove_xss

main/session/add_courses_to_session.php

@@ -216,7 +216,7 @@ unset($Courses);
 } ?>" style="margin:0px;" <?php if ($ajax_search) {
     echo ' onsubmit="valide();"';
 }?>>
-    <legend><?php echo $tool_name.' ('.$session_info['name'].')'; ?></legend>
+    <legend><?php echo $tool_name.' ('.Security::remove_XSS($session_info['name']).')'; ?></legend>
     <input type="hidden" name="formSent" value="1" />
     <div id="multiple-add-session" class="row">
         <div class="col-md-4">

main/session/add_users_to_session.php

@@ -588,7 +588,7 @@ $newLinks .= Display::url(
         } ?>" <?php if ($ajax_search) {
             echo ' onsubmit="valide();"';
         } ?>>
-        <?php echo '<legend>'.$tool_name.' ('.$session_info['name'].') </legend>'; ?>
+        <?php echo '<legend>'.$tool_name.' ('.Security::remove_XSS($session_info['name']).') </legend>'; ?>
         <?php
         if ($add_type == 'multiple') {
             if (is_array($extra_field_list)) {