MDL-76861 blog: Ensure correct escaping applied to search string

HirotoKagotani · Jan 12, 2023 · 71564e3 · 71564e3
1 parent 230ac29
commit 71564e3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/blog/lib.php b/blog/lib.php
@@ -903,7 +903,7 @@ function blog_get_headers($courseid=null, $groupid=null, $userid=null, $tagid=nu
         if (!empty($search) && has_capability('moodle/blog:search', $sitecontext)) {
             $headers['filters']['search'] = $search;
             $blogurl->param('search', $search);
-            $PAGE->navbar->add(get_string('searchterm', 'blog', $search), $blogurl->out());
+            $PAGE->navbar->add(get_string('searchterm', 'blog', s($search)), $blogurl->out());
         }
     }