From 84c6fa0b61e89c171886b43e03a622570257cbec Mon Sep 17 00:00:00 2001 From: Angel Fernando Quiroz Campos Date: Thu, 30 Jun 2022 14:39:43 -0500 Subject: [PATCH] LP: strip tags for titles with HTML - refs BT#20051 --- main/inc/lib/StudentFollowPage.php | 2 +- main/mySpace/myStudents.php | 6 +----- 2 files changed, 2 insertions(+), 6 deletions(-) diff --git a/main/inc/lib/StudentFollowPage.php b/main/inc/lib/StudentFollowPage.php index 6b4298f47c..a9d530e32a 100644 --- a/main/inc/lib/StudentFollowPage.php +++ b/main/inc/lib/StudentFollowPage.php @@ -134,7 +134,7 @@ class StudentFollowPage $return .= Display::url( Display::return_icon('edit.png', get_lang('Edit'), [], ICON_SIZE_TINY), $editUrl, - ['class' => 'ajax', 'data-title' => $lpInfo['lp_name']] + ['class' => 'ajax', 'data-title' => strip_tags($lpInfo['lp_name'])] ); } diff --git a/main/mySpace/myStudents.php b/main/mySpace/myStudents.php index a15e1338d7..debcd1ee7d 100755 --- a/main/mySpace/myStudents.php +++ b/main/mySpace/myStudents.php @@ -1846,11 +1846,7 @@ if (empty($details)) { } if (in_array('lp', $columnHeadersKeys)) { - $contentToExport[] = api_html_entity_decode( - stripslashes($lp_name), - ENT_QUOTES, - $charset - ); + $contentToExport[] = strip_tags($lp_name); echo Display::tag('td', stripslashes($lp_name)); } if (in_array('time', $columnHeadersKeys)) {