From f469fb691aa201937ddcd3ff59a420d690ad2403 Mon Sep 17 00:00:00 2001
From: Jetha Chan <jetha@moodle.org>
Date: Fri, 2 May 2014 14:49:43 +0800
Subject: [PATCH] MDL-45387 lib_form/filemanager: erroneous escaping on
 reference list

Adjusted scope of HTML escaping.
---
 lib/form/filemanager.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/form/filemanager.js b/lib/form/filemanager.js
index a770d3f..4b9a912 100644
--- a/lib/form/filemanager.js
+++ b/lib/form/filemanager.js
@@ -1002,9 +1002,9 @@ M.form_filemanager.init = function(Y, options) {
                             if (obj.references) {
                                 node.reflist = '';
                                 for (var i in obj.references) {
-                                    node.reflist += '<li>'+obj.references[i]+'</li>';
+                                    node.reflist += '<li>'+Y.Escape.html(obj.references[i])+'</li>';
                                 }
-                                selectnode.one('.fp-reflist .fp-value').setContent(Y.Escape.html(node.reflist));
+                                selectnode.one('.fp-reflist .fp-value').setContent(node.reflist);
                             } else {
                                 selectnode.one('.fp-reflist .fp-value').setContent('');
                             }
-- 
1.8.3.2