* Documentation

* Safe xhtml output with htmlspecialchars()

diff --git a/includes/SpecialVersion.php b/includes/SpecialVersion.php
index 5c9424e..3ef0e67 100644 (file)
--- a/includes/SpecialVersion.php
+++ b/includes/SpecialVersion.php
@@ -6,6 +6,7 @@
  * @subpackage SpecialPage
  *
  * @author Ævar Arnfjörð Bjarmason <avarab@gmail.com>
+ * @copyright Copyright © 2005, Ævar Arnfjörð Bjarmason
  * @license http://www.gnu.org/copyleft/gpl.html GNU General Public License 2.0 or later
  */
 
@@ -137,7 +138,7 @@ class SpecialVersion {
                if ( isset( $author ) )
                        $ret .= ' by ' . $this->langObj->listToText( (array)$author );
 
-               return "$ret\n";
+               return htmlspecialchars( $ret ) . "\n";
        }
 
        function wgHooks() {