From 3c4a91bc34ad07a511ee11aa620af186e3562894 Mon Sep 17 00:00:00 2001
From: Jens Frank <jeluf@users.mediawiki.org>
Date: Wed, 13 Oct 2004 21:07:08 +0000
Subject: [PATCH] Fix cross site scripting bug

---
 includes/SpecialEmailuser.php | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/includes/SpecialEmailuser.php b/includes/SpecialEmailuser.php
index 9661a1c78d..35d3cce509 100644
--- a/includes/SpecialEmailuser.php
+++ b/includes/SpecialEmailuser.php
@@ -114,9 +114,8 @@ class EmailUserForm {
 </tr><tr>
 <td align=right>{$emm}:</td>
 <td align=left>
-<textarea name=\"wpText\" rows=10 cols=60 wrap=virtual>
-{$this->text}
-</textarea>
+<textarea name=\"wpText\" rows=10 cols=60 wrap=virtual>" . htmlspecialchars( $this->text ) .
+"</textarea>
 </td></tr><tr>
 <td>&nbsp;</td><td align=left>
 <input type=submit name=\"wpSend\" value=\"{$ems}\">
-- 
2.20.1