From 5711e095b7667fd2c5e30856eb6e0ba17469ea86 Mon Sep 17 00:00:00 2001
From: Jetha Chan <jetha@moodle.org>
Date: Fri, 2 May 2014 14:49:43 +0800
Subject: [PATCH] MDL-45387 lib_form/filemanager: erroneous escaping on
 reference list

Adjusted scope of HTML escaping.
---
 lib/form/filemanager.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/form/filemanager.js b/lib/form/filemanager.js
index 8af21f8..eb38491 100644
--- a/lib/form/filemanager.js
+++ b/lib/form/filemanager.js
@@ -1017,9 +1017,9 @@ M.form_filemanager.init = function(Y, options) {
                             if (obj.references) {
                                 node.reflist = '';
                                 for (var i in obj.references) {
-                                    node.reflist += '<li>'+obj.references[i]+'</li>';
+                                    node.reflist += '<li>'+Y.Escape.html(obj.references[i])+'</li>';
                                 }
-                                selectnode.one('.fp-reflist .fp-value').setContent(Y.Escape.html(node.reflist));
+                                selectnode.one('.fp-reflist .fp-value').setContent(node.reflist);
                             } else {
                                 selectnode.one('.fp-reflist .fp-value').setContent('');
                             }
-- 
1.8.3.2