* And more escaping

diff --git a/includes/Article.php b/includes/Article.php
index 9aed6f4..1a66758 100644 (file)
--- a/includes/Article.php
+++ b/includes/Article.php
@@ -1842,7 +1842,7 @@ class Article {
 
                if (wfRunHooks('ArticleDelete', array(&$this, &$wgUser, &$reason))) {
                        if ( $this->doDeleteArticle( $reason ) ) {
-                               $deleted = $this->mTitle->getPrefixedText();
+                               $deleted = wfEscapeWikiText( $this->mTitle->getPrefixedText() );
 
                                $wgOut->setPagetitle( wfMsg( 'actioncomplete' ) );
                                $wgOut->setRobotpolicy( 'noindex,nofollow' );

diff --git a/includes/SpecialMovepage.php b/includes/SpecialMovepage.php
index 3939712..086f4d5 100644 (file)
--- a/includes/SpecialMovepage.php
+++ b/includes/SpecialMovepage.php
@@ -249,8 +249,8 @@ class MovePageForm {
                $wgOut->setPagetitle( wfMsg( 'movepage' ) );
                $wgOut->setSubtitle( wfMsg( 'pagemovedsub' ) );
 
-               $oldText = $wgRequest->getVal('oldtitle');
-               $newText = $wgRequest->getVal('newtitle');
+               $oldText = wfEscapeWikiText( $wgRequest->getVal('oldtitle') );
+               $newText = wfEscapeWikiText( $wgRequest->getVal('newtitle') );
                $talkmoved = $wgRequest->getVal('talkmoved');
 
                $text = wfMsg( 'pagemovedtext', $oldText, $newText );