* More escaping

diff --git a/includes/ProtectionForm.php b/includes/ProtectionForm.php
index 2a40a37..456cc8f 100644 (file)
--- a/includes/ProtectionForm.php
+++ b/includes/ProtectionForm.php
@@ -79,7 +79,7 @@ class ProtectionForm {
 
                $wgOut->addWikiText(
                        wfMsg( $this->disabled ? "protect-viewtext" : "protect-text",
-                               $this->mTitle->getPrefixedText() ) );
+                               wfEscapeWikiText( $this->mTitle->getPrefixedText() ) ) );
 
                $wgOut->addHTML( $this->buildForm() );
 

diff --git a/includes/SpecialSearch.php b/includes/SpecialSearch.php
index 4db27e8..c466985 100644 (file)
--- a/includes/SpecialSearch.php
+++ b/includes/SpecialSearch.php
@@ -110,7 +110,7 @@ class SpecialSearch {
                                $editurl = $t->escapeLocalURL( 'action=edit' );
                        }
                }
-               $wgOut->addWikiText( wfMsg( 'noexactmatch', $term ) );
+               $wgOut->addWikiText( wfMsg( 'noexactmatch', wfEscapeWikiText( $term ) ) );
 
                return $this->showResults( $term );
        }