--- loncom/interface/lonmenu.pm 2017/05/08 14:20:20 1.472 +++ loncom/interface/lonmenu.pm 2017/08/21 21:13:09 1.474 @@ -1,7 +1,7 @@ # The LearningOnline Network with CAPA # Routines to control the menu # -# $Id: lonmenu.pm,v 1.472 2017/05/08 14:20:20 raeburn Exp $ +# $Id: lonmenu.pm,v 1.474 2017/08/21 21:13:09 raeburn Exp $ # # Copyright Michigan State University Board of Trustees # @@ -513,6 +513,7 @@ sub secondary_menu { } } } + $$menuitem[0] = &HTML::Entities::encode($$menuitem[0],'&<>"'); } $menu .= &prep_menuitem(\@$menuitem); } @@ -531,7 +532,7 @@ sub secondary_menu { my $londocroot = $Apache::lonnet::perlvar{'lonDocRoot'}; ($escurl = $env{'request.filename'}) =~ s{^\Q$londocroot\E}{}; $escurl = &escape($escurl); - } + } $menu =~ s/\[url\]/$escurl/g; $menu =~ s/\[symb\]/$escsymb/g; } @@ -671,7 +672,7 @@ sub innerregister { no_mt => 1}); } - unless (($crstype eq 'Placement') || (!$env{'request.role.adv'})) { + unless (($crstype eq 'Placement') && (!$env{'request.role.adv'})) { push @crumbs, {text => $maptitle, no_mt => 1} if ($maptitle && $maptitle ne 'default.sequence' && $maptitle ne $coursetitle);