Clean error messages (merged from stable)

diff --git a/lib/weblib.php b/lib/weblib.php
index 12578d8d06d0ef3ef8d78fa09cd63b77c8255c3b..a66faefcfbc2ecab3804b22811b11b17d38f06d5 100644 (file)
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -2874,6 +2874,9 @@ function error ($message, $link='') {
 
     print_header(get_string('error'));
     echo '<br />';
+
+    $message = clean_text($message);   // In case nasties are in here
+
     print_simple_box($message, 'center', '', '#FFBBBB');
 
     if (!$link) {