From: Rob Church <robchurch@users.mediawiki.org>
Date: Sat, 24 Jun 2006 00:27:16 +0000 (+0000)
Subject: Cripple the wiki text stuff for now. It doesn't SEEM dangerous but I haven't tested... 
X-Git-Tag: 1.31.0-rc.0~56644
X-Git-Url: http://git.cyclocoop.org/%7B%24www_url%7Dadmin/password.php?a=commitdiff_plain;h=3d291f615ba35b64a27b276d0d444a026023d37a;p=lhc%2Fweb%2Fwiklou.git

Cripple the wiki text stuff for now. It doesn't SEEM dangerous but I haven't tested the lot.
---

diff --git a/includes/ImageGallery.php b/includes/ImageGallery.php
index 86927c5b0e..ccf2c146f7 100644
--- a/includes/ImageGallery.php
+++ b/includes/ImageGallery.php
@@ -43,7 +43,6 @@ class ImageGallery
 	
 	/**
 	 * Set the caption
-	 * What's passed is used as HTML so don't do anything stupid
 	 *
 	 * @param $caption Caption
 	 */
@@ -140,7 +139,7 @@ class ImageGallery
 
 		$s = '<table class="gallery" cellspacing="0" cellpadding="0">';
 		if( $this->mCaption )
-			$s .= '<td class="galleryheader" colspan="4"><big>' . $this->mCaption . '</big></td>';
+			$s .= '<td class="galleryheader" colspan="4"><big>' . htmlspecialchars( $this->mCaption ) . '</big></td>';
 		
 		$i = 0;
 		foreach ( $this->mImages as $pair ) {
diff --git a/includes/Parser.php b/includes/Parser.php
index 8baaf97e89..e6ebb460c4 100644
--- a/includes/Parser.php
+++ b/includes/Parser.php
@@ -4125,7 +4125,7 @@ class Parser
 		$ig->useSkin( $this->mOptions->getSkin() );
 
 		if( isset( $params['caption'] ) )
-			$ig->setCaption( $this->replaceInternalLinks( $params['caption'] ) );
+			$ig->setCaption( $params['caption'] );
 		
 		$lines = explode( "\n", $text );
 		foreach ( $lines as $line ) {