From 86de0b5fab4ce064801a0cf6a389f0708ff5912c Mon Sep 17 00:00:00 2001 From: River Tarnell Date: Thu, 14 Oct 2004 03:50:14 +0000 Subject: [PATCH] fix xss attack --- includes/SpecialGeo.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/SpecialGeo.php b/includes/SpecialGeo.php index 04e6c2b66f..c4af429b87 100644 --- a/includes/SpecialGeo.php +++ b/includes/SpecialGeo.php @@ -28,7 +28,7 @@ */ function wfSpecialGeo( $page = '' ) { global $wgOut, $wgLang, $wgRequest; - $coordinates = $wgRequest->getText( 'coordinates' ) ; + $coordinates = htmlspecialchars( $wgRequest->getText( 'coordinates' ) ); $coordinates = explode ( ":" , $coordinates ) ; $ns = array_shift ( $coordinates ) ; $ew = array_shift ( $coordinates ) ; -- 2.20.1