From ca1c1f094427bd36c7982e3cdd2c3da5ce0035a0 Mon Sep 17 00:00:00 2001 From: Alexandre Emsenhuber Date: Thu, 27 May 2010 15:51:25 +0000 Subject: [PATCH] Follow-up r66933: escape the whole message instead of only the parameter --- includes/specials/SpecialUserlogin.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/specials/SpecialUserlogin.php b/includes/specials/SpecialUserlogin.php index 4f231e69ec..0a41b1faf2 100644 --- a/includes/specials/SpecialUserlogin.php +++ b/includes/specials/SpecialUserlogin.php @@ -128,7 +128,7 @@ class LoginForm { global $wgOut; if ( $this->mEmail == '' ) { - $this->mainLoginForm( wfMsgExt( 'noemail', 'parsemag', htmlspecialchars( $this->mName ) ) ); + $this->mainLoginForm( wfMsgExt( 'noemail', array( 'parsemag', 'escape' ), $this->mName ) ); return; } -- 2.20.1