From bfc788180a6a84677a73fc2ef0853f3217723c3d Mon Sep 17 00:00:00 2001 From: Jens Frank Date: Wed, 13 Oct 2004 20:02:10 +0000 Subject: [PATCH] Fix cross site scripting bug --- includes/SpecialIpblocklist.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/SpecialIpblocklist.php b/includes/SpecialIpblocklist.php index 8d427ac29e..87d9e39038 100644 --- a/includes/SpecialIpblocklist.php +++ b/includes/SpecialIpblocklist.php @@ -18,7 +18,7 @@ function wfSpecialIpblocklist() { $ipu = new IPUnblockForm( $ip, $reason ); if ( "success" == $action ) { - $msg = wfMsg( "ipusuccess", $ip ); + $msg = wfMsg( "ipusuccess", htmlspecialchars( $ip ) ); $ipu->showList( $msg ); } else if ( "submit" == $action && $wgRequest->wasPosted() ) { if ( ! $wgUser->isSysop() ) { -- 2.20.1