Followup r95753 per CR: prevent extensions from making isMovable() return true for...

[lhc/web/wiklou.git] / includes / PatrolLog.php

diff --git a/includes/PatrolLog.php b/includes/PatrolLog.php
index 0df48a8..9a23b1a 100644 (file)
--- a/includes/PatrolLog.php
+++ b/includes/PatrolLog.php
@@ -13,6 +13,8 @@ class PatrolLog {
         *
         * @param $rc Mixed: change identifier or RecentChange object
         * @param $auto Boolean: was this patrol event automatic?
+        *
+        * @return bool
         */
        public static function record( $rc, $auto = false ) {
                if( !( $rc instanceof RecentChange ) ) {
@@ -67,7 +69,8 @@ class PatrolLog {
                        return wfMsgHtml( 'patrol-log-line', $diff, $link, $auto );
                } else {
                        $text = $title->getPrefixedText();
-                       return wfMsgForContent( 'patrol-log-line', wfMsgHtml('patrol-log-diff',$cur), "[[$text]]", '' );
+                       $diff = htmlspecialchars( wfMsgForContent( 'patrol-log-diff', $cur ) );
+                       return wfMsgForContent( 'patrol-log-line', $diff, "[[$text]]", '' );
                }
        }