From e0f423faf7af5c85ce047d25f443b4c4d3ea8fc6 Mon Sep 17 00:00:00 2001
From: Jens Frank <jeluf@users.mediawiki.org>
Date: Wed, 8 Dec 2004 10:50:08 +0000
Subject: [PATCH] prevent javascript insertion

---
 includes/ImageGallery.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/includes/ImageGallery.php b/includes/ImageGallery.php
index acbfc9b95b..6c778af0b1 100644
--- a/includes/ImageGallery.php
+++ b/includes/ImageGallery.php
@@ -123,7 +123,7 @@ class ImageGallery
 				'<table width="100%" height="150px">'.
 				'<tr><td align="center" valign="center" style="background-color:#F8F8F8;border:solid 1px #888888;">' .
 				$sk->makeKnownLinkObj( $nt, '<img  src="'.$img->createThumb(120,120).'" alt="" />' ) . '</td></tr></table> ' .
-				$textlink . $text . $nb; 
+				$textlink . htmlspecialchars( $text ) . $nb; 
 
 			$s .= "</td>\n" .  (($i%4==3) ? "</tr>\n" : '');
 
-- 
2.20.1