From 2b801227af1c368869fdd9a9dca60244e8a98dc8 Mon Sep 17 00:00:00 2001
From: oliver <coderkun@users.noreply.github.com>
Date: Sat, 16 Apr 2016 18:23:41 +0200
Subject: [PATCH] questtype ?Multiple Choice?: escape content for text input
 fields

---
 questtypes/multiplechoice/html/edittask.tpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/questtypes/multiplechoice/html/edittask.tpl b/questtypes/multiplechoice/html/edittask.tpl
index 973ef483..0bc8d0ba 100644
--- a/questtypes/multiplechoice/html/edittask.tpl
+++ b/questtypes/multiplechoice/html/edittask.tpl
@@ -64,7 +64,7 @@
                     <li>
                         <input id="question-<?=$questionIndex?>-answer-<?=$answerIndex?>-tick" type="checkbox" name="questions[<?=$questionIndex?>][answers][<?=$answerIndex?>][tick]" <?php if(array_key_exists('tick', $answer) && $answer['tick']) : ?>checked="checked"<?php endif ?> />
                         <label for="questions[<?=$questionIndex?>][answers][<?=$answerIndex?>][tick]">
-                            <input id="question-<?=$questionIndex?>-answer-<?=$answerIndex?>" type="text" name="questions[<?=$questionIndex?>][answers][<?=$answerIndex?>][answer]" value="<?=$answer['answer']?>" <?php if(!empty($validations) && array_key_exists($questionIndex, $validations) && !empty($validations[$questionIndex]) && array_key_exists($answerIndex, $validations[$questionIndex]['answers']) && $validations[$questionIndex]['answers'][$answerIndex] !== true) : ?>class="invalid"<?php endif ?> />
+                            <input id="question-<?=$questionIndex?>-answer-<?=$answerIndex?>" type="text" name="questions[<?=$questionIndex?>][answers][<?=$answerIndex?>][answer]" value="<?=\hhu\z\Utils::t($answer['answer'])?>" <?php if(!empty($validations) && array_key_exists($questionIndex, $validations) && !empty($validations[$questionIndex]) && array_key_exists($answerIndex, $validations[$questionIndex]['answers']) && $validations[$questionIndex]['answers'][$answerIndex] !== true) : ?>class="invalid"<?php endif ?> />
                         </label>
                         <button class="remove-answer" type="button">−</button>
                     </li>