From ade974bc37baed4517a377e67c26de8bab22ac88 Mon Sep 17 00:00:00 2001
From: Vincent Vanwaelscappel <vincent@cubedesigners.com>
Date: Thu, 5 Jun 2025 18:30:29 +0200
Subject: [PATCH] wip #7586 @0.25

---
 src/Manifest.php | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/src/Manifest.php b/src/Manifest.php
index 4d6b005..a290df3 100644
--- a/src/Manifest.php
+++ b/src/Manifest.php
@@ -84,8 +84,8 @@ class Manifest
         <schema>ADL SCORM</schema>
         <schemaversion>2004 ' . $v . ' Edition</schemaversion>
     </metadata>
-    <organizations default="' . $this->_escapeAttr($this->getOrganization()) . '">
-        <organization identifier="' . $this->_escapeAttr($this->getOrganization()) . '" adlseq:objectivesGlobalToSystem="false">
+    <organizations default="' . $this->_escapeAttr($this->_escapeOrganization($this->getOrganization())) . '">
+        <organization identifier="' . $this->_escapeAttr($this->_escapeOrganization($this->getOrganization())) . '" adlseq:objectivesGlobalToSystem="false">
             <title>' . $this->_escape($this->getTitle()) . '</title>
             <item identifier="' . $this->_escapeAttr($this->getReference()) . '" identifierref="' . $this->_escapeAttr($this->getReference()) . '_RES" isvisible="true">
                 <title>' . $this->_escape($this->getTitle()) . '</title>
@@ -133,8 +133,8 @@ class Manifest
         <schema>ADL SCORM</schema>
         <schemaversion>1.2</schemaversion>
     </metadata>
-    <organizations default="' . $this->_escapeAttr($this->getOrganization()) . '">
-        <organization identifier="' . $this->_escapeAttr($this->getOrganization()) . '" structure="hierarchical">
+    <organizations default="' . $this->_escapeAttr($this->_escapeOrganization($this->getOrganization())) . '">
+        <organization identifier="' . $this->_escapeAttr($this->_escapeOrganization($this->getOrganization())) . '" structure="hierarchical">
             <title>' . $this->_escape($this->getTitle()) . '</title>
             <item identifier="' . $this->_escapeAttr($this->getReference()) . '" identifierref="' . $this->_escapeAttr($this->getReference()) . '_RES" isvisible="true">
                 <title>' . $this->_escape($this->getTitle()) . '</title>
@@ -151,6 +151,11 @@ class Manifest
         return $res;
     }
 
+    protected function _escapeOrganization($org)
+    {
+        return preg_replace('/[^a-z0-9_]/i', '', $org);
+    }
+
     protected function _escape($string, $flags = ENT_XML1)
     {
         return htmlspecialchars($string, $flags);
-- 
2.39.5