From: Aaron Schulz <aaron@users.mediawiki.org>
Date: Mon, 30 Mar 2009 23:31:38 +0000 (+0000)
Subject: (bug 18263) Escape single-quotes for wpDestForm
X-Git-Tag: 1.31.0-rc.0~42263
X-Git-Url: http://git.cyclocoop.org/data/Fool?a=commitdiff_plain;h=6d92792a01ba430a940009a628a0ca3b05d0f628;p=lhc%2Fweb%2Fwiklou.git

(bug 18263) Escape single-quotes for wpDestForm
---

diff --git a/includes/specials/SpecialUpload.php b/includes/specials/SpecialUpload.php
index 4473027a5d..c084923051 100644
--- a/includes/specials/SpecialUpload.php
+++ b/includes/specials/SpecialUpload.php
@@ -1157,8 +1157,7 @@ wgUploadAutoFill = {$autofill};
 		);
 		if( $this->mForReUpload ) {
 			$wgOut->addHTML(
-				"<input tabindex='2' type='hidden' name='wpDestFile' id='wpDestFile' 
-					value='{$encDestName}' />" . 
+				Xml::hidden( 'wpDestFile', $this->mDesiredDestName, array('id'=>'wpDestFile','tabindex'=>2) ) .
 				"<tt>" .
 				$encDestName .
 				"</tt>"
@@ -1254,7 +1253,8 @@ wgUploadAutoFill = {$autofill};
 			<tr>
 				<td></td>
 					<td class='mw-input'>
-						<input tabindex='9' type='submit' name='wpUpload' value=\"{$ulb}\"" . $wgUser->getSkin()->tooltipAndAccesskey( 'upload' ) . " />
+						<input tabindex='9' type='submit' name='wpUpload' value=\"{$ulb}\"" .
+							$wgUser->getSkin()->tooltipAndAccesskey( 'upload' ) . " />
 					</td>
 			</tr>
 			<tr>