X-Git-Url: https://git.cyclocoop.org/?a=blobdiff_plain;f=includes%2Fspecials%2FSpecialMIMEsearch.php;h=e8e5ea0d06b76a248acf20baaf9a57581d43f8cf;hb=4d7a8b877917b5a7e3f98400135d0a1e1f480e70;hp=18c163e138ab448d82932424b16d728845e4fa70;hpb=38a0733fef96fd2f837144293b902d2e0353c955;p=lhc%2Fweb%2Fwiklou.git

diff --git a/includes/specials/SpecialMIMEsearch.php b/includes/specials/SpecialMIMEsearch.php
index 18c163e138..e8e5ea0d06 100644
--- a/includes/specials/SpecialMIMEsearch.php
+++ b/includes/specials/SpecialMIMEsearch.php
@@ -132,6 +132,7 @@ class MIMEsearchPage extends QueryPage {
 			->setMethod( 'get' )
 			->prepareForm()
 			->displayForm( false );
+		return '';
 	}
 
 	protected function getSuggestionsForTypes() {
@@ -186,10 +187,11 @@ class MIMEsearchPage extends QueryPage {
 	function formatResult( $skin, $result ) {
 		$linkRenderer = $this->getLinkRenderer();
 		$nt = Title::makeTitle( $result->namespace, $result->title );
-		$text = MediaWikiServices::getInstance()->getContentLanguage()->convert( $nt->getText() );
+		$text = MediaWikiServices::getInstance()->getContentLanguage()
+			->convert( htmlspecialchars( $nt->getText() ) );
 		$plink = $linkRenderer->makeLink(
 			Title::newFromText( $nt->getPrefixedText() ),
-			$text
+			new HtmlArmor( $text )
 		);
 
 		$download = Linker::makeMediaLinkObj( $nt, $this->msg( 'download' )->escaped() );