Fixed regex escaping issue in table

catalyst · Nov 13, 2024 · 3fa53bd · 3fa53bd
1 parent ef2af35
commit 3fa53bd
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/classes/search_table.php b/classes/search_table.php
@@ -221,7 +221,10 @@ public function col_userid(stdClass $record): string {
     public function col_search(stdClass $record): string {
         $class = 'border p-1 d-inline';
         $style = 'white-space: pre-wrap;';
-        return \html_writer::tag('pre', $record->search, ['class' => $class, 'style' => $style]);
+        $html = \html_writer::start_tag('pre', ['class' => $class, 'style' => $style]);
+        $html .= htmlspecialchars($record->search);
+        $html .= \html_writer::end_tag('pre');
+        return $html;
     }
 
     /**