X-Git-Url: https://git.cyclocoop.org/%242?a=blobdiff_plain;f=includes%2Fchanges%2FChangesList.php;h=fea31b46d6b66c2080f5c9401cba2c9f12c2d46d;hb=db4fa6fb9ffc4601e7a02b6c30f22962db63615c;hp=eb9febea08097bfca6f865912f5a506829e13175;hpb=2252838b4a0ea09d393c26281eae62ee8c5cda98;p=lhc%2Fweb%2Fwiklou.git

diff --git a/includes/changes/ChangesList.php b/includes/changes/ChangesList.php
index eb9febea08..fea31b46d6 100644
--- a/includes/changes/ChangesList.php
+++ b/includes/changes/ChangesList.php
@@ -531,10 +531,10 @@ class ChangesList extends ContextSource {
 	public function getTimestamp( $rc ) {
 		// @todo FIXME: Hard coded ". .". Is there a message for this? Should there be?
 		return $this->message['semicolon-separator'] . '<span class="mw-changeslist-date">' .
-			$this->getLanguage()->userTime(
+			htmlspecialchars( $this->getLanguage()->userTime(
 				$rc->mAttribs['rc_timestamp'],
 				$this->getUser()
-			) . '</span> <span class="mw-changeslist-separator">. .</span> ';
+			) ) . '</span> <span class="mw-changeslist-separator">. .</span> ';
 	}
 
 	/**