From 1f967c82fff12ca02927c430520e93c6d86e586b Mon Sep 17 00:00:00 2001
From: moodler <moodler>
Date: Thu, 20 Dec 2007 01:51:33 +0000
Subject: [PATCH] Merged MDL-7493 further fix: strip_tags from title strings
 because the titles may have HTML in them.

---
 blocks/moodleblock.class.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/blocks/moodleblock.class.php b/blocks/moodleblock.class.php
index dd3b406071..9c62c55f6c 100644
--- a/blocks/moodleblock.class.php
+++ b/blocks/moodleblock.class.php
@@ -334,8 +334,8 @@ class block_base {
         if (!empty($CFG->allowuserblockhiding)) {
             //Accessibility: added 'alt' text for the +- icon.
             //Theme the buttons using, Admin - Miscellaneous - smartpix.
-            $strshow = addslashes_js(get_string('showblocka', 'access', $this->title));
-            $strhide = addslashes_js(get_string('hideblocka', 'access', $this->title));
+            $strshow = addslashes_js(get_string('showblocka', 'access', strip_tags($this->title)));
+            $strhide = addslashes_js(get_string('hideblocka', 'access', strip_tags($this->title)));
             $title .= '<input type="image" src="'.$CFG->pixpath.'/t/switch_minus.gif" '. 
                 'id="togglehide_inst'.$this->instance->id.'" '.
                 'onclick="elementToggleHide(this, true, function(el) {'.
-- 
2.39.5