mLabel has already been escaped if required. It isn't run through htmlspecialchars()
in other display formats, so doesn't need to be done in vform.
Change-Id: I0b0feec408687cdadf01da5f2078980015538bb7
array(
'class' => 'mw-ui-checkbox-label'
),
- Xml::check( $this->mName, $value, $attr ) . // Html:rawElement doesn't escape contents.
- htmlspecialchars( $this->mLabel ) );
+ Xml::check( $this->mName, $value, $attr ) . $this->mLabel );
} else {
return Xml::check( $this->mName, $value, $attr )
. ' '