From 6dbae8e7bc21b30880959bc313c85a88121da02e Mon Sep 17 00:00:00 2001 From: Brian Wolff Date: Sun, 17 Feb 2019 12:49:03 +0000 Subject: [PATCH] Escape messages ipb-sitewide and ipb-partial. Radio button htmlform treats options as being raw html Change-Id: Ia25ed5b88e937414ea7993a1cf29fe44ed8e22d4 --- includes/specials/SpecialBlock.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/includes/specials/SpecialBlock.php b/includes/specials/SpecialBlock.php index a6fd55ebcf..59c14fce6e 100644 --- a/includes/specials/SpecialBlock.php +++ b/includes/specials/SpecialBlock.php @@ -177,8 +177,8 @@ class SpecialBlock extends FormSpecialPage { 'type' => 'radio', 'cssclass' => 'mw-block-editing-restriction', 'options' => [ - $this->msg( 'ipb-sitewide' )->text() => 'sitewide', - $this->msg( 'ipb-partial' )->text() => 'partial', + $this->msg( 'ipb-sitewide' )->escaped() => 'sitewide', + $this->msg( 'ipb-partial' )->escaped() => 'partial', ], 'section' => 'actions', ]; -- 2.20.1