Reject titles with %XX hex codes (since these have special meaning in URL links and...

diff --git a/includes/Title.php b/includes/Title.php
index ef11553..3924085 100644 (file)
--- a/includes/Title.php
+++ b/includes/Title.php
@@ -979,7 +979,7 @@ class Title {
                if ( $imgpre === false ) {
                        $imgpre = ':' . $wgContLang->getNsText( Namespace::getImage() ) . ':';
                        # % is needed as well
-                       $rxTc = '/[^' . Title::legalChars() . ']/';
+                       $rxTc = '/[^' . Title::legalChars() . ']|%[0-9A-Fa-f]{2}/';
                }
 
                $this->mInterwiki = $this->mFragment = '';