Escape the output of $wgLang->timeanddate() in SpecialContributions. Was escaped...
authorRoan Kattouw <catrope@users.mediawiki.org>
Wed, 26 Jan 2011 17:59:54 +0000 (17:59 +0000)
committerRoan Kattouw <catrope@users.mediawiki.org>
Wed, 26 Jan 2011 17:59:54 +0000 (17:59 +0000)
includes/specials/SpecialContributions.php

index ea4d26d..d0227d6 100644 (file)
@@ -671,7 +671,7 @@ class ContribsPager extends ReverseChronologicalPager {
                                array( 'oldid' => intval( $row->rev_id ) )
                        );
                } else {
-                       $d = $date;
+                       $d = htmlspecialchars( $date );
                }
                if( $rev->isDeleted( Revision::DELETED_TEXT ) ) {
                        $d = '<span class="history-deleted">' . $d . '</span>';