From a46dd1e769fd80f058e0fe0067ab6d397f1b07be Mon Sep 17 00:00:00 2001
From: srosse <stephane.rosse@frentix.com>
Date: Thu, 24 Jan 2019 12:18:15 +0100
Subject: [PATCH] OO-3836: escape < in TextRun because browsers rendered as
 unkown tags

---
 .../ui/components/AssessmentObjectComponentRenderer.java     | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/main/java/org/olat/ims/qti21/ui/components/AssessmentObjectComponentRenderer.java b/src/main/java/org/olat/ims/qti21/ui/components/AssessmentObjectComponentRenderer.java
index 47693ac2017..9256d78f58c 100644
--- a/src/main/java/org/olat/ims/qti21/ui/components/AssessmentObjectComponentRenderer.java
+++ b/src/main/java/org/olat/ims/qti21/ui/components/AssessmentObjectComponentRenderer.java
@@ -676,7 +676,10 @@ public abstract class AssessmentObjectComponentRenderer extends DefaultComponent
 				break;
 			}
 			case TextRun.DISPLAY_NAME: {
-				sb.append(((TextRun)inline).getTextContent());
+				String content = ((TextRun)inline).getTextContent();
+				if(content != null) {
+					sb.append(content.replace("<", "&lt;"));
+				}
 				break;
 			}
 			case Math.QTI_CLASS_NAME: {
-- 
GitLab