diff --git a/main/exercice/exercise.class.php b/main/exercice/exercise.class.php index 132cc2013a..1cfa82abcd 100644 --- a/main/exercice/exercise.class.php +++ b/main/exercice/exercise.class.php @@ -1229,7 +1229,7 @@ class Exercise { */ function processCreation($form, $type='') { - $this->updateTitle($form->getSubmitValue('exerciseTitle')); + $this->updateTitle(htmlentities($form->getSubmitValue('exerciseTitle'))); $this->updateDescription($form->getSubmitValue('exerciseDescription')); $this->updateAttempts($form->getSubmitValue('exerciseAttempts')); $this->updateFeedbackType($form->getSubmitValue('exerciseFeedbackType'));