Merge "HtmlArmor: Pass ENT_QUOTES to htmlspecialchars()"
authorjenkins-bot <jenkins-bot@gerrit.wikimedia.org>
Sat, 6 Aug 2016 23:18:16 +0000 (23:18 +0000)
committerGerrit Code Review <gerrit@wikimedia.org>
Sat, 6 Aug 2016 23:18:16 +0000 (23:18 +0000)
includes/libs/HtmlArmor.php

index 511e1c9..4ba1bc3 100644 (file)
@@ -50,7 +50,7 @@ class HtmlArmor {
                if ( $input instanceof HtmlArmor ) {
                        return $input->value;
                } else {
-                       return htmlspecialchars( $input );
+                       return htmlspecialchars( $input, ENT_QUOTES );
                }
        }
 }