From 024ef5288a477276466898997dedfed9e6386341 Mon Sep 17 00:00:00 2001
From: skodak <skodak>
Date: Sun, 23 Sep 2007 13:13:13 +0000
Subject: [PATCH] MDL-11414 fixed handling of log urls (problem reported by
 Andreas Nolden)

---
 course/lib.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/course/lib.php b/course/lib.php
index 76f3a7a89b..9ea5061781 100644
--- a/course/lib.php
+++ b/course/lib.php
@@ -514,7 +514,7 @@ function print_log($course, $user=0, $date=0, $order="l.time ASC", $page=0, $per
 
         $log->url  = strip_tags(urldecode($log->url));   // Some XSS protection
         $log->info = strip_tags(urldecode($log->info));  // Some XSS protection
-        $log->url  = str_replace('&', '&amp;', $log->url); /// XHTML compatibility
+        $log->url  = s($log->url); /// XSS protection and XHTML compatibility - should be in link_to_popup_window() instead!!
 
         echo '<tr class="r'.$row.'">';
         if ($course->id == SITEID) {
-- 
2.39.5