The thank you page header is not filtered, resolves #664. (#665)

lucaboesch · web-flow · commit 3d277dcf3b71 · 2025-11-01T14:57:29.000-04:00
diff --git a/questionnaire.class.php b/questionnaire.class.php
@@ -2524,7 +2524,7 @@ private function response_goto_thankyou() {
             $this->page->add_to_page('progressbar',
                     $this->renderer->render_progress_bar(count($this->questionsbysec) + 1, $this->questionsbysec));
         }
-        $this->page->add_to_page('title', $thankhead);
+        $this->page->add_to_page('title', format_string($thankhead));
         $this->page->add_to_page('addinfo',
             format_text(file_rewrite_pluginfile_urls($thankbody, 'pluginfile.php',
                 $this->context->id, 'mod_questionnaire', 'thankbody', $this->survey->id), FORMAT_HTML, ['noclean' => true]));

Original file line number	Diff line number	Diff line change
`@@ -2524,7 +2524,7 @@ private function response_goto_thankyou() {`
`2524`	`2524`	`$this->page->add_to_page('progressbar',`
`2525`	`2525`	`$this->renderer->render_progress_bar(count($this->questionsbysec) + 1, $this->questionsbysec));`
`2526`	`2526`	`}`
`2527`		`- $this->page->add_to_page('title', $thankhead);`
	`2527`	`+ $this->page->add_to_page('title', format_string($thankhead));`
`2528`	`2528`	`$this->page->add_to_page('addinfo',`
`2529`	`2529`	`format_text(file_rewrite_pluginfile_urls($thankbody, 'pluginfile.php',`
`2530`	`2530`	`$this->context->id, 'mod_questionnaire', 'thankbody', $this->survey->id), FORMAT_HTML, ['noclean' => true]));`