* 'developer' group deprecated by default
* Special:Upload now uses 'upload' permission instead of hardcoding login check
* Add 'importupload' permission to disable direct uploads to Special:Import
-
+* (bug 2459) Correct escaping in Special:Log prev/next links
=== Caveats ===
function showPrevNext( &$out ) {
global $wgContLang,$wgRequest;
$pieces = array();
- $pieces[] = 'type=' . htmlspecialchars( $this->reader->queryType() );
- $pieces[] = 'user=' . htmlspecialchars( $this->reader->queryUser() );
- $pieces[] = 'page=' . htmlspecialchars( $this->reader->queryTitle() );
+ $pieces[] = 'type=' . urlencode( $this->reader->queryType() );
+ $pieces[] = 'user=' . urlencode( $this->reader->queryUser() );
+ $pieces[] = 'page=' . urlencode( $this->reader->queryTitle() );
$bits = implode( '&', $pieces );
list( $limit, $offset ) = $wgRequest->getLimitOffset();