From d7eb9c3366c86da51bc2182a70c1546c44f2ad22 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Niklas=20Laxstr=C3=B6m?= Date: Wed, 30 Nov 2016 14:53:11 +0100 Subject: [PATCH] SpecialActiveUsers: escape group names Change-Id: I1a4d1501b8481d9f670916818fe7f75e983c2800 --- includes/specials/SpecialActiveusers.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/specials/SpecialActiveusers.php b/includes/specials/SpecialActiveusers.php index 7e29be0a29..a01e9b2675 100644 --- a/includes/specials/SpecialActiveusers.php +++ b/includes/specials/SpecialActiveusers.php @@ -86,7 +86,7 @@ class SpecialActiveUsers extends SpecialPage { $groups = User::getAllGroups(); foreach ( $groups as $group ) { - $msg = User::getGroupName( $group ); + $msg = htmlspecialchars( User::getGroupName( $group ) ); $options[$msg] = $group; } -- 2.20.1