Html escaped from display name in xblock.

LMS-11194
2014-08-08 12:38:12 +05:00
parent 7225420fa0
commit f336d0490c
5 changed files with 25 additions and 3 deletions
--- a/common/lib/xmodule/xmodule/x_module.py
+++ b/common/lib/xmodule/xmodule/x_module.py
@@ -231,7 +231,7 @@ class XModuleMixin(XBlockMixin):
        name = self.display_name
        if name is None:
            name = self.url_name.replace('_', ' ')
-        return name
+        return name.replace('<', '&lt;').replace('>', '&gt;')

    @property
    def xblock_kvs(self):