From 02e7e4c029de05d7c94b2e49bfd043bf063960fa Mon Sep 17 00:00:00 2001
From: =?utf8?q?=C3=86var=20Arnfj=C3=B6r=C3=B0=20Bjarmason?=
 <avar@users.mediawiki.org>
Date: Mon, 1 Aug 2005 20:48:29 +0000
Subject: [PATCH] * Using wfMsgHtml() for safe html output

---
 includes/SpecialAllpages.php | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/includes/SpecialAllpages.php b/includes/SpecialAllpages.php
index 73edf099dc..55ce0bf864 100644
--- a/includes/SpecialAllpages.php
+++ b/includes/SpecialAllpages.php
@@ -54,26 +54,26 @@ function namespaceForm ( $namespace = NS_MAIN, $from = '' ) {
 	foreach ( $arr as $ns => $name ) {
 		if ($ns < NS_MAIN)
 			continue;
-		$n = $ns == 0 ? wfMsg ( 'blanknamespace' ) : $name;
+		$n = $ns == 0 ? wfMsgHtml ( 'blanknamespace' ) : $name;
 		$sel = $ns == $namespace ? ' selected="selected"' : '';
-		$namespaceselect .= "<option value='$ns'$sel>$n</option>";	
+		$namespaceselect .= "<option value='$ns'$sel>$n</option>\n";
 	}
 	$namespaceselect .= '</select>';
 
 	$frombox = "<input type='text' size='20' name='from' id='nsfrom' value=\""
 	            . htmlspecialchars ( $from ) . '"/>';
-	$submitbutton = '<input type="submit" value="' . wfMsg( 'allpagessubmit' ) . '" />';
+	$submitbutton = '<input type="submit" value="' . wfMsgHtml( 'allpagessubmit' ) . '" />';
 	
 	$out = "<div class='namespaceselector'><form method='get' action='{$wgScript}'>";
 	$out .= '<input type="hidden" name="title" value="'.$t->getPrefixedText().'" />';
 	$out .= "
 <table id='nsselect' class='allpages'>
 	<tr>
-		<td align='right'>" . wfMsg('allpagesfrom') . "</td>
+		<td align='right'>" . wfMsgHtml('allpagesfrom') . "</td>
 		<td align='left'><label for='nsfrom'>$frombox</label></td>
 	</tr>
 	<tr>    
-		<td align='right'><label for='nsselectbox'>" . wfMsg('namespace') . "</label></td>
+		<td align='right'><label for='nsselectbox'>" . wfMsgHtml('namespace') . "</label></td>
 		<td align='left'>
 			$namespaceselect $submitbutton
 		</td>
-- 
2.20.1