/**
*
+ * @package MediaWiki
+ * @subpackage SpecialPage
*/
/**
*/
function wfSpecialGeo( $page = '' ) {
global $wgOut, $wgLang, $wgRequest;
- $coordinates = $wgRequest->getText( 'coordinates' ) ;
+ $coordinates = htmlspecialchars( $wgRequest->getText( 'coordinates' ) );
$coordinates = explode ( ":" , $coordinates ) ;
$ns = array_shift ( $coordinates ) ;
$ew = array_shift ( $coordinates ) ;