better cleaning of post title SC#251 revisited; merged from MOODLE_16_STABLE

diff --git a/mod/forum/post.php b/mod/forum/post.php
index db38dd39193e781a2038d68f7467d508285b7642..df7800890345f53469b1fec06082517e43e46e09 100644 (file)
--- a/mod/forum/post.php
+++ b/mod/forum/post.php
@@ -79,7 +79,7 @@
             $errordestination = $SESSION->fromurl;
         }
 
-        $post->subject = clean_text(strip_tags($post->subject, '<lang><span>'));        // Strip all tags except lang
+        $post->subject = clean_param(strip_tags($post->subject, '<lang><span>'), PARAM_CLEAN);        // Strip all tags except lang
 
         //$post->message = clean_text($post->message, $post->format);   // Clean up any bad tags