From 71ef68225959ce04db0366234d9b007400d92c13 Mon Sep 17 00:00:00 2001
From: tjhunt <tjhunt>
Date: Mon, 3 Nov 2008 05:03:00 +0000
Subject: [PATCH] user selector: MDL-16996- followup - change optgroup label
 escaping funciton to keep Nicolas Martignoni happy. I can's say I full
 understand this issue.

---
 user/selector/lib.php | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/user/selector/lib.php b/user/selector/lib.php
index 2a6cd8014e..886f6a2458 100644
--- a/user/selector/lib.php
+++ b/user/selector/lib.php
@@ -427,7 +427,7 @@ abstract class user_selector_base {
      */
     protected function output_optgroup($groupname, $users, $select) {
         if (!empty($users)) {
-            $output = '  <optgroup label="' . s($groupname) . ' (' . count($users) . ')">' . "\n";
+            $output = '  <optgroup label="' . htmlspecialchars($groupname) . ' (' . count($users) . ')">' . "\n";
             foreach ($users as $user) {
                 $attributes = '';
                 if (!empty($user->disabled)) {
@@ -440,7 +440,7 @@ abstract class user_selector_base {
                         $this->output_user($user) . "</option>\n";
             }
         } else {
-            $output = '  <optgroup label="' . s($groupname) . '">' . "\n";
+            $output = '  <optgroup label="' . htmlspecialchars($groupname) . '">' . "\n";
             $output .= '    <option disabled="disabled">&nbsp;</option>' . "\n";
         }
         $output .= "  </optgroup>\n";
-- 
2.39.5