adding quoting to output of hidden params in moodle_url

diff --git a/lib/weblib.php b/lib/weblib.php
index 6fe4c59f4457bbc852fdf3a93bcf0241f04bd641..4215cf18c70d0995e140cab04338d6e75a1cf621 100644 (file)
--- a/lib/weblib.php
+++ b/lib/weblib.php
@@ -388,6 +388,7 @@ class moodle_url {
         $str = '';
         foreach ($this->params as $key => $val){
             if (FALSE === array_search($key, $exclude)) {
+                $val = s($val);
                 $str.= "$tabindent<input type=\"hidden\" name=\"$key\" value=\"$val\" />\n";
             }
         }