From: umherirrender <umherirrender_de.wp@web.de>
Date: Thu, 29 Jan 2015 20:45:23 +0000 (+0100)
Subject: Escape extra input messages on Special:UserLogin/signup
X-Git-Tag: 1.31.0-rc.0~12261^2
X-Git-Url: http://git.cyclocoop.org/%24href?a=commitdiff_plain;h=89f6293bf2d54c8facff4f80f199df626f5e497a;p=lhc%2Fweb%2Fwiklou.git

Escape extra input messages on Special:UserLogin/signup

TitleBlacklist and AntiSpoof can register extra input fields with a own
message, this message would now be escaped to avoid use of raw html.
Messages: 'titleblacklist-override' and 'antispoof-ignore'

The messages are now handled similar to checkbox 'createaccountmail'

Bug: T85864
Change-Id: I14326c3844904560b66eb8e8eb7d36706caa47da
---

diff --git a/includes/templates/Usercreate.php b/includes/templates/Usercreate.php
index 43bab0e933..dc9da634fd 100644
--- a/includes/templates/Usercreate.php
+++ b/includes/templates/Usercreate.php
@@ -218,7 +218,7 @@ class UsercreateTemplate extends BaseTemplate {
 										echo 'checked="checked"';
 									} ?>
 								><label for="<?php echo htmlspecialchars( $inputItem['name'] ); ?>">
-									<?php $this->msgHtml( $inputItem['msg'] ); ?>
+									<?php $this->msg( $inputItem['msg'] ); ?>
 								</label>
 							</div>
 						<?php