From 6d92792a01ba430a940009a628a0ca3b05d0f628 Mon Sep 17 00:00:00 2001
From: Aaron Schulz <aaron@users.mediawiki.org>
Date: Mon, 30 Mar 2009 23:31:38 +0000
Subject: [PATCH] (bug 18263) Escape single-quotes for wpDestForm

---
 includes/specials/SpecialUpload.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/includes/specials/SpecialUpload.php b/includes/specials/SpecialUpload.php
index 4473027a5d..c084923051 100644
--- a/includes/specials/SpecialUpload.php
+++ b/includes/specials/SpecialUpload.php
@@ -1157,8 +1157,7 @@ wgUploadAutoFill = {$autofill};
 		);
 		if( $this->mForReUpload ) {
 			$wgOut->addHTML(
-				"<input tabindex='2' type='hidden' name='wpDestFile' id='wpDestFile' 
-					value='{$encDestName}' />" . 
+				Xml::hidden( 'wpDestFile', $this->mDesiredDestName, array('id'=>'wpDestFile','tabindex'=>2) ) .
 				"<tt>" .
 				$encDestName .
 				"</tt>"
@@ -1254,7 +1253,8 @@ wgUploadAutoFill = {$autofill};
 			<tr>
 				<td></td>
 					<td class='mw-input'>
-						<input tabindex='9' type='submit' name='wpUpload' value=\"{$ulb}\"" . $wgUser->getSkin()->tooltipAndAccesskey( 'upload' ) . " />
+						<input tabindex='9' type='submit' name='wpUpload' value=\"{$ulb}\"" .
+							$wgUser->getSkin()->tooltipAndAccesskey( 'upload' ) . " />
 					</td>
 			</tr>
 			<tr>
-- 
2.20.1