Merge "Skin.php: HTML escape message pipe-separator"
authorjenkins-bot <jenkins-bot@gerrit.wikimedia.org>
Wed, 13 Sep 2017 13:16:39 +0000 (13:16 +0000)
committerGerrit Code Review <gerrit@wikimedia.org>
Wed, 13 Sep 2017 13:16:40 +0000 (13:16 +0000)
includes/skins/Skin.php

index df7a9ed..eaee0d2 100644 (file)
@@ -1611,7 +1611,7 @@ abstract class Skin extends ContextSource {
 
                $result .= implode(
                        '<span class="mw-editsection-divider">'
-                               . wfMessage( 'pipe-separator' )->inLanguage( $lang )->text()
+                               . wfMessage( 'pipe-separator' )->inLanguage( $lang )->escaped()
                                . '</span>',
                        $linksHtml
                );