MDL-10057 XSS risk flag for Add/update course category

diff --git a/lib/db/access.php b/lib/db/access.php
index adb71d1c118bd8c66e66d1a0e35243be8c543132..7b23058838a517910c5056e9a3832a975e7664f3 100644 (file)
--- a/lib/db/access.php
+++ b/lib/db/access.php
@@ -391,6 +391,8 @@ $moodle_capabilities = array(
 
     'moodle/category:create' => array(
 
+        'riskbitmask' => RISK_XSS,
+
         'captype' => 'write',
         'contextlevel' => CONTEXT_COURSECAT,
         'legacy' => array(
@@ -409,6 +411,8 @@ $moodle_capabilities = array(
 
     'moodle/category:update' => array(
 
+        'riskbitmask' => RISK_XSS,
+
         'captype' => 'write',
         'contextlevel' => CONTEXT_COURSECAT,
         'legacy' => array(