HTML escaping

surlabs · Dec 12, 2024 · a90f7b5 · a90f7b5
1 parent dbeee9f
commit a90f7b5
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/components/ILIAS/LTIConsumer/classes/class.ilLTIConsumerSettingsFormGUI.php b/components/ILIAS/LTIConsumer/classes/class.ilLTIConsumerSettingsFormGUI.php
@@ -1,7 +1,5 @@
 <?php
 
-declare(strict_types=1);
-
 /**
  * This file is part of ILIAS, a powerful learning management system
  * published by ILIAS open source e-Learning e.V.
@@ -18,6 +16,8 @@
  *
  *********************************************************************/
 
+declare(strict_types=1);
+
 /**
  * Class ilLTIConsumerSettingsFormGUI
  *
@@ -57,7 +57,7 @@ protected function initForm(string $formaction, string $saveCommand, string $can
 
         $item = new ilNonEditableValueGUI($DIC->language()->txt('provider_info'));
         $item->setValue($this->object->getProvider()->getTitle());
-        $item->setInfo($this->object->getProvider()->getDescription());
+        $item->setInfo(htmlspecialchars($this->object->getProvider()->getDescription()));
         $this->addItem($item);
 
         $item = new ilTextInputGUI($DIC->language()->txt('title'), 'title');