diff --git a/mod/quiz/classes/output/navigation_panel_base.php b/mod/quiz/classes/output/navigation_panel_base.php
index c4350612d5b..b4a56a32571 100644
--- a/mod/quiz/classes/output/navigation_panel_base.php
+++ b/mod/quiz/classes/output/navigation_panel_base.php
@@ -171,13 +171,16 @@ abstract class navigation_panel_base {
      * @return user_picture|null
      */
     public function user_picture() {
-        global $DB;
+        global $DB, $PAGE;
         if ($this->attemptobj->get_quiz()->showuserpicture == QUIZ_SHOWIMAGE_NONE) {
             return null;
         }
         $user = $DB->get_record('user', ['id' => $this->attemptobj->get_userid()]);
         $userpicture = new user_picture($user);
         $userpicture->courseid = $this->attemptobj->get_courseid();
+        if ($PAGE->pagelayout === 'secure') {
+            $userpicture->link = false;
+        }
         if ($this->attemptobj->get_quiz()->showuserpicture == QUIZ_SHOWIMAGE_LARGE) {
             $userpicture->size = true;
         }
diff --git a/mod/quiz/tests/behat/attempt_basic.feature b/mod/quiz/tests/behat/attempt_basic.feature
index 2006cb8df9a..c8e0ffd505a 100644
--- a/mod/quiz/tests/behat/attempt_basic.feature
+++ b/mod/quiz/tests/behat/attempt_basic.feature
@@ -235,3 +235,25 @@ Feature: Attempt a quiz
     And I press "Continue your attempt"
     Then I should see "First question"
     And I should not see "First question version 2"
+
+  @javascript
+  Scenario: User image in the quiz navigation in normal mode.
+    Given I am on the "Quiz 1" "quiz activity editing" page logged in as "admin"
+    And I expand all fieldsets
+    And I set the field "Show the user's picture" to "Large image"
+    And I press "Save and return to course"
+    And I am on the "Quiz 1" "mod_quiz > View" page logged in as "student"
+    And I press "Attempt quiz"
+    Then "Student One" "link" should exist in the "Quiz navigation" "block"
+
+  @javascript
+  Scenario: User image in the quiz navigation in secure layout.
+    Given I am on the "Quiz 1" "quiz activity editing" page logged in as "admin"
+    And I expand all fieldsets
+    And I set the field "Show the user's picture" to "Large image"
+    And I set the field "Browser security" to "Full screen pop-up with some JavaScript security"
+    And I press "Save and return to course"
+    And I am on the "Quiz 1" "mod_quiz > View" page logged in as "student"
+    And I press "Attempt quiz"
+    And I switch to a second window
+    Then "Student One" "link" should not exist in the "Quiz navigation" "block"