fix xss

diff --git a/includes/Action.php b/includes/Action.php
index 2dcdf78..a5bcb05 100644 (file)
--- a/includes/Action.php
+++ b/includes/Action.php
@@ -328,7 +328,7 @@ abstract class Action {
         * @return String
         */
        protected function getDescription() {
-               return wfMsg( strtolower( $this->getName() ) );
+               return wfMsgHtml( strtolower( $this->getName() ) );
        }
 
        /**

diff --git a/includes/actions/CreditsAction.php b/includes/actions/CreditsAction.php
index 3b2f77e..1072d25 100644 (file)
--- a/includes/actions/CreditsAction.php
+++ b/includes/actions/CreditsAction.php
@@ -30,7 +30,7 @@ class CreditsAction extends FormlessAction {
        }
 
        protected function getDescription() {
-               return wfMsg( 'creditspage' );
+               return wfMsgHtml( 'creditspage' );
        }
 
        /**

diff --git a/includes/actions/WatchAction.php b/includes/actions/WatchAction.php
index 5cd2ce7..e8ae3b6 100644 (file)
--- a/includes/actions/WatchAction.php
+++ b/includes/actions/WatchAction.php
@@ -31,7 +31,7 @@ class WatchAction extends FormAction {
        }
 
        protected function getDescription() {
-               return wfMsg( 'addwatch' );
+               return wfMsgHtml( 'addwatch' );
        }
 
        /**