From b780d900e3b36fb5b85bb58c61efaa2e32db984f Mon Sep 17 00:00:00 2001
From: =?utf8?q?Niklas=20Laxstr=C3=B6m?= <niklas.laxstrom@gmail.com>
Date: Sat, 6 Dec 2014 10:52:47 +0100
Subject: [PATCH] Escape retrievedfrom message in the skin

Change-Id: Ifd696ecd93c76e56cb21b3f2645367beeeeb5ba0
---
 includes/skins/Skin.php | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/includes/skins/Skin.php b/includes/skins/Skin.php
index 1a4ec98b18..04c02d6607 100644
--- a/includes/skins/Skin.php
+++ b/includes/skins/Skin.php
@@ -646,8 +646,9 @@ abstract class Skin extends ContextSource {
 			$url = htmlspecialchars( wfExpandIRI( $this->getTitle()->getCanonicalURL() ) );
 		}
 
-		return $this->msg( 'retrievedfrom', '<a dir="ltr" href="' . $url
-			. '">' . $url . '</a>' )->text();
+		return $this->msg( 'retrievedfrom' )
+			->rawParams( '<a dir="ltr" href="' . $url. '">' . $url . '</a>' )
+			->escaped();
 	}
 
 	/**
-- 
2.20.1