followup r91869: validate id chars for incoming prefs tabs in hash ([\w-]+ is suffici...

diff --git a/resources/mediawiki.special/mediawiki.special.preferences.js b/resources/mediawiki.special/mediawiki.special.preferences.js
index 98ae253..2d27138 100644 (file)
--- a/resources/mediawiki.special/mediawiki.special.preferences.js
+++ b/resources/mediawiki.special/mediawiki.special.preferences.js
@@ -42,7 +42,7 @@ $( '#preferences' )
 // On document ready:
 $( function() {
        var hash = window.location.hash;
-       if( hash.match( /^#preftab-/ ) ) {
+       if( hash.match( /^#preftab-[\w-]+/ ) ) {
                var $tab = $( hash + '-tab' );
                $tab.click();
        }