From c8dc7c875f225294f9e9fdf24242b65dc196a146 Mon Sep 17 00:00:00 2001
From: Tim Starling <tstarling@users.mediawiki.org>
Date: Thu, 23 Apr 2009 14:38:03 +0000
Subject: [PATCH] Fixed XSS.

---
 includes/specials/SpecialUpload.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/includes/specials/SpecialUpload.php b/includes/specials/SpecialUpload.php
index c084923051..d8679cd154 100644
--- a/includes/specials/SpecialUpload.php
+++ b/includes/specials/SpecialUpload.php
@@ -1166,7 +1166,7 @@ wgUploadAutoFill = {$autofill};
 		else {
 			$wgOut->addHTML(
 				"<input tabindex='2' type='text' name='wpDestFile' id='wpDestFile' size='60'
-						value='{$encDestName}' onchange='toggleFilenameFiller()' $destOnkeyup />"
+						value=\"{$encDestName}\" onchange='toggleFilenameFiller()' $destOnkeyup />"
 			);
 		}
 		
-- 
2.20.1