From f99b6c988d3f2e0210645afe9761caf764fdd6af Mon Sep 17 00:00:00 2001 From: Leo Koppelkamm Date: Sun, 10 Jul 2011 14:56:55 +0000 Subject: [PATCH] Escape sidebar ID's. Bug 18688 --- includes/Skin.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/Skin.php b/includes/Skin.php index d57135028f..2f2cc5cf94 100644 --- a/includes/Skin.php +++ b/includes/Skin.php @@ -1330,7 +1330,7 @@ abstract class Skin { $bar[$heading][] = array_merge( array( 'text' => $text, 'href' => $href, - 'id' => 'n-' . strtr( $line[1], ' ', '-' ), + 'id' => 'n-' . Sanitizer::escapeId( strtr( $line[1], ' ', '-' ) ), 'active' => false ), $extraAttribs ); } elseif ( ( substr( $line, 0, 2 ) == '{{' ) && ( substr( $line, -2 ) == '}}' ) ) { -- 2.20.1