From: Tim Starling <tstarling@users.mediawiki.org>
Date: Thu, 23 Apr 2009 14:38:03 +0000 (+0000)
Subject: Fixed XSS.
X-Git-Tag: 1.31.0-rc.0~42068
X-Git-Url: http://git.cyclocoop.org/%7B%24www_url%7Dadmin/password.php?a=commitdiff_plain;h=c8dc7c875f225294f9e9fdf24242b65dc196a146;p=lhc%2Fweb%2Fwiklou.git

Fixed XSS.
---

diff --git a/includes/specials/SpecialUpload.php b/includes/specials/SpecialUpload.php
index c084923051..d8679cd154 100644
--- a/includes/specials/SpecialUpload.php
+++ b/includes/specials/SpecialUpload.php
@@ -1166,7 +1166,7 @@ wgUploadAutoFill = {$autofill};
 		else {
 			$wgOut->addHTML(
 				"<input tabindex='2' type='text' name='wpDestFile' id='wpDestFile' size='60'
-						value='{$encDestName}' onchange='toggleFilenameFiller()' $destOnkeyup />"
+						value=\"{$encDestName}\" onchange='toggleFilenameFiller()' $destOnkeyup />"
 			);
 		}