From da59f326d5d86911e0e1560e6c515c3cbc84fbeb Mon Sep 17 00:00:00 2001 From: =?utf8?q?Mat=C4=9Bj=20Grabovsk=C3=BD?= Date: Wed, 22 Jun 2011 14:59:05 +0000 Subject: [PATCH] Follow-up r90482: escape some more wikitext --- includes/FileDeleteForm.php | 4 ++-- includes/specials/SpecialUserlogin.php | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/includes/FileDeleteForm.php b/includes/FileDeleteForm.php index 854005b0a1..54c19f0f59 100644 --- a/includes/FileDeleteForm.php +++ b/includes/FileDeleteForm.php @@ -253,7 +253,7 @@ class FileDeleteForm { return wfMsgExt( "{$message}-old", # To ensure grep will find them: 'filedelete-intro-old', 'filedelete-nofile-old', 'filedelete-success-old' 'parse', - $this->title->getText(), + wfEscapeWikiText( $this->title->getText() ), $wgLang->date( $this->getTimestamp(), true ), $wgLang->time( $this->getTimestamp(), true ), wfExpandUrl( $this->file->getArchiveUrl( $this->oldimage ) ) ); @@ -261,7 +261,7 @@ class FileDeleteForm { return wfMsgExt( $message, 'parse', - $this->title->getText() + wfEscapeWikiText( $this->title->getText() ) ); } } diff --git a/includes/specials/SpecialUserlogin.php b/includes/specials/SpecialUserlogin.php index 12f4f281af..e16e00fb73 100644 --- a/includes/specials/SpecialUserlogin.php +++ b/includes/specials/SpecialUserlogin.php @@ -831,7 +831,7 @@ class LoginForm extends SpecialPage { $wgOut->setPageTitle( wfMsg( 'loginsuccesstitle' ) ); if( $msgname ){ - $wgOut->addWikiMsg( $msgname, $wgUser->getName() ); + $wgOut->addWikiMsg( $msgname, wfEscapeWikiText( $wgUser->getName() ) ); } $wgOut->addHTML( $injected_html ); -- 2.20.1