bmbrands / moodle-theme_elegance

This is the new official elegance repository
http://basbrands.nl
23 stars 12 forks source link

Messages with IFRAME tag blocks all pages #179

Open juaneladio opened 6 years ago

juaneladio commented 6 years ago

A Moodle user reported that, after sign in, all pages are broken. When I review the case, I noticed that he received a New Notification about a forum message, and that message started with an Iframe tag for Youtube. That broke all pages.

When I marked the message as read, the pages loaded correctly.

I think the HTML entities should be filtered at this place: https://github.com/bmbrands/moodle-theme_elegance/blob/master/renderers/elegance_renderer.php#L552

Greetings.