fixed bug #5572 missing PARAM_CLEAN; merged from MOODLE_16_MOODLE

diff --git a/mod/exercise/assessments.php b/mod/exercise/assessments.php
index 84425cfe4ec78519b01cb75c7f31718d2e0bbe48..5995d9168e809877fa2a6b02bbe7042dc5ff7c54 100644 (file)
--- a/mod/exercise/assessments.php
+++ b/mod/exercise/assessments.php
@@ -718,7 +718,7 @@
                     $element->exerciseid = $exercise->id;
                     $element->assessmentid = $assessment->id;
                     $element->elementno = clean_param($key, PARAM_INT);
-                    $element->feedback   = clean_param($form->feedback[$key]);
+                    $element->feedback   = clean_param($form->feedback[$key], PARAM_CLEAN);
                     $element->grade = $thegrade;
                     if (!$element->id = insert_record("exercise_grades", $element)) {
                         error("Could not insert exercise element!");