Group: add remove_xss

main/group/group.php

@@ -261,7 +261,7 @@ if (api_get_setting('allow_group_categories') === 'true') {
             false
         );
 
-        echo $category['description'];
+        echo Security::remove_XSS($category['description']);
         echo $groupToShow;
     }
 } else {

main/inc/lib/groupmanager.lib.php

@@ -2351,12 +2351,14 @@ class GroupManager
                     $group_name .= ' ('.$this_group['session_name'].')';
                 }
                 $group_name .= $session_img;
-                $row[] = $group_name.$group_name2.'<br />'.stripslashes(trim($this_group['description']));
+                $row[] = Security::remove_XSS($group_name).
+                    $group_name2.'<br />'.Security::remove_XSS(stripslashes(trim($this_group['description'])));
             } else {
                 if ('true' === $hideGroup) {
                     continue;
                 }
-                $row[] = $this_group['name'].'<br />'.stripslashes(trim($this_group['description']));
+                $row[] = Security::remove_XSS($this_group['name']).'<br />'.
+                    Security::remove_XSS(stripslashes(trim($this_group['description'])));
             }
 
             // Tutor name