From: Platonides <platonides@users.mediawiki.org>
Date: Tue, 8 Jun 2010 16:12:55 +0000 (+0000)
Subject: Escape for html $wgLocalStylePath.
X-Git-Tag: 1.31.0-rc.0~36583
X-Git-Url: http://git.cyclocoop.org/%24action?a=commitdiff_plain;h=962134601f6268ee9b844abb299ed37aa533259d;p=lhc%2Fweb%2Fwiklou.git

Escape for html $wgLocalStylePath.
Killed unused $wgStylePath globals.
---

diff --git a/skins/Vector.php b/skins/Vector.php
index 5edc01206e..a05ee9baed 100644
--- a/skins/Vector.php
+++ b/skins/Vector.php
@@ -35,7 +35,7 @@ class SkinVector extends SkinTemplate {
 		// wait for the CSS file to load before fetching the HTC file.
 		$out->addScript(
 			'<!--[if lt IE 7]><style type="text/css">body{behavior:url("' .
-				$wgLocalStylePath .
+				htmlspecialchars($wgLocalStylePath) .
 				'/vector/csshover.htc")}</style><![endif]-->'
 		);
 	}
@@ -70,7 +70,7 @@ class SkinVector extends SkinTemplate {
 	 * @private
 	 */
 	function buildNavigationUrls() {
-		global $wgContLang, $wgLang, $wgOut, $wgUser, $wgRequest, $wgArticle, $wgStylePath;
+		global $wgContLang, $wgLang, $wgOut, $wgUser, $wgRequest, $wgArticle
 		global $wgDisableLangConversion, $wgVectorUseIconWatch;
 
 		wfProfileIn( __METHOD__ );
@@ -676,7 +676,7 @@ class VectorTemplate extends QuickTemplate {
 	 * when UI is in RTL mode
 	 */
 	private function renderNavigation( $elements ) {
-		global $wgContLang, $wgVectorUseSimpleSearch, $wgVectorShowVariantName, $wgStylePath;
+		global $wgContLang, $wgVectorUseSimpleSearch, $wgVectorShowVariantName;
 
 		// If only one element was given, wrap it in an array, allowing more
 		// flexible arguments