* (bug 21520) Anonymous previews now also gives a warning about not being
logged in (anonpreviewwarning).
* (bug 22935) image/x-ms-bmp mime type added for BMP files
+* (bug 23024) Special:ListFiles now escapes file names correctly
=== API changes in 1.17 ===
* (bug 22738) Allow filtering by action type on query=logevent
if ( $imgfile === null ) $imgfile = wfMsg( 'imgfile' );
$name = $this->mCurrentRow->img_name;
- $link = $this->getSkin()->linkKnown( Title::makeTitle( NS_FILE, $name ), $value );
+ $link = $this->getSkin()->linkKnown( Title::makeTitle( NS_FILE, $name ), htmlspecialchars( $value ) );
$image = wfLocalFile( $value );
$url = $image->getURL();
$download = Xml::element('a', array( 'href' => $url ), $imgfile );