From f40dfdf51ed30b78d4f884bceaf2d5730ef41d44 Mon Sep 17 00:00:00 2001
From: Paul Holden <paulh@moodle.com>
Date: Tue, 16 Mar 2021 20:55:12 +0000
Subject: [PATCH] MDL-71130 quiz_grading: escape user idnumber on display.

---
 mod/quiz/report/grading/report.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/mod/quiz/report/grading/report.php b/mod/quiz/report/grading/report.php
index 9c9abbb752b..10225905d51 100644
--- a/mod/quiz/report/grading/report.php
+++ b/mod/quiz/report/grading/report.php
@@ -665,7 +665,7 @@ class quiz_grading_report extends quiz_default_report {
         $a = new stdClass();
         $a->attempt = $attempt->attempt;
         $a->fullname = fullname($attempt);
-        $a->idnumber = $attempt->idnumber;
+        $a->idnumber = s($attempt->idnumber);
 
         $showidnumbers = $showidnumbers && !empty($attempt->idnumber);