From 89f6293bf2d54c8facff4f80f199df626f5e497a Mon Sep 17 00:00:00 2001
From: umherirrender <umherirrender_de.wp@web.de>
Date: Thu, 29 Jan 2015 21:45:23 +0100
Subject: [PATCH] Escape extra input messages on Special:UserLogin/signup

TitleBlacklist and AntiSpoof can register extra input fields with a own
message, this message would now be escaped to avoid use of raw html.
Messages: 'titleblacklist-override' and 'antispoof-ignore'

The messages are now handled similar to checkbox 'createaccountmail'

Bug: T85864
Change-Id: I14326c3844904560b66eb8e8eb7d36706caa47da
---
 includes/templates/Usercreate.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/includes/templates/Usercreate.php b/includes/templates/Usercreate.php
index 43bab0e933..dc9da634fd 100644
--- a/includes/templates/Usercreate.php
+++ b/includes/templates/Usercreate.php
@@ -218,7 +218,7 @@ class UsercreateTemplate extends BaseTemplate {
 										echo 'checked="checked"';
 									} ?>
 								><label for="<?php echo htmlspecialchars( $inputItem['name'] ); ?>">
-									<?php $this->msgHtml( $inputItem['msg'] ); ?>
+									<?php $this->msg( $inputItem['msg'] ); ?>
 								</label>
 							</div>
 						<?php
-- 
2.20.1