From cf8c853a4263aa2420aeb3f0583805255336004d Mon Sep 17 00:00:00 2001 From: Roan Kattouw Date: Wed, 26 Jan 2011 17:59:54 +0000 Subject: [PATCH] Escape the output of $wgLang->timeanddate() in SpecialContributions. Was escaped in one code path but not in the other --- includes/specials/SpecialContributions.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/includes/specials/SpecialContributions.php b/includes/specials/SpecialContributions.php index ea4d26d3fb..d0227d6bf8 100644 --- a/includes/specials/SpecialContributions.php +++ b/includes/specials/SpecialContributions.php @@ -671,7 +671,7 @@ class ContribsPager extends ReverseChronologicalPager { array( 'oldid' => intval( $row->rev_id ) ) ); } else { - $d = $date; + $d = htmlspecialchars( $date ); } if( $rev->isDeleted( Revision::DELETED_TEXT ) ) { $d = '' . $d . ''; -- 2.20.1