From d49d3aa8946ea61df9e6ea8d48da017beda06abe Mon Sep 17 00:00:00 2001 From: Brion Vibber Date: Thu, 24 Jun 2004 04:36:20 +0000 Subject: [PATCH] Remove < and > from legal title chars. Adding these was a serious mistake; it opens many HTML/Javascript insertion vectors. --- includes/Title.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/Title.php b/includes/Title.php index 58fcd2cc2e..66c52e436f 100644 --- a/includes/Title.php +++ b/includes/Title.php @@ -193,7 +193,7 @@ class Title { # Theoretically 0x80-0x9F of ISO 8859-1 should be disallowed, but # this breaks interlanguage links - $set = " %!\"$&'()*,\\-.\\/0-9:;<=>?@A-Z\\\\^_`a-z{}~\\x80-\\xFF"; + $set = " %!\"$&'()*,\\-.\\/0-9:;=?@A-Z\\\\^_`a-z{}~\\x80-\\xFF"; return $set; } -- 2.20.1