Revert more minor breakage from missing HTML escaping (broken June 24)

diff --git a/includes/Article.php b/includes/Article.php
index 87bda1d..4540e94 100644 (file)
--- a/includes/Article.php
+++ b/includes/Article.php
@@ -1623,7 +1623,7 @@ class Article {
 
                wfDebug( "Article::confirmProtect\n" );
 
-               $sub = $this->mTitle->getPrefixedText();
+               $sub = htmlspecialchars( $this->mTitle->getPrefixedText() );
                $wgOut->setRobotpolicy( 'noindex,nofollow' );
 
                $check = '';

diff --git a/includes/SpecialBlockip.php b/includes/SpecialBlockip.php
index 0e43897..162faa3 100644 (file)
--- a/includes/SpecialBlockip.php
+++ b/includes/SpecialBlockip.php
@@ -67,7 +67,7 @@ class IPBlockForm {
                $action = $titleObj->escapeLocalURL( "action=submit" );
 
                if ( "" != $err ) {
-                       $wgOut->setSubtitle( wfMsg( 'formerror' ) );
+                       $wgOut->setSubtitle( wfMsgHtml( 'formerror' ) );
                        $wgOut->addHTML( "<p class='error'>{$err}</p>\n" );
                }