From 8da1713151014df197a994c009f3963e6ceb1729 Mon Sep 17 00:00:00 2001 From: Andrew Garrett Date: Wed, 17 Jan 2007 12:19:53 +0000 Subject: [PATCH] - $term = htmlspecialchars( $term ); + $term = urlencode( $term ); ($terms is used in a URL, and hence should be url-encoded rather than html-encoded) --- includes/AjaxFunctions.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/AjaxFunctions.php b/includes/AjaxFunctions.php index 248cbec521..600cd573ed 100644 --- a/includes/AjaxFunctions.php +++ b/includes/AjaxFunctions.php @@ -108,7 +108,7 @@ function wfSajaxSearch( $term ) { $subtitlemsg = ( Title::newFromText($term) ? 'searchsubtitle' : 'searchsubtitleinvalid' ); $subtitle = $wgOut->parse( wfMsg( $subtitlemsg, wfEscapeWikiText($term) ) ); #FIXME: parser is missing mTitle ! - $term = htmlspecialchars( $term ); + $term = urlencode( $term ); $html = '
' . wfMsg( 'hideresults' ) . '
' . '

'.wfMsg('search') -- 2.20.1