http://www.mediawiki.org/wiki/Special:Code/MediaWiki/90588

Revision: 90588
Author:   mgrabovsky
Date:     2011-06-22 14:59:05 +0000 (Wed, 22 Jun 2011)
Log Message:
-----------
Follow-up r90482: escape some more wikitext

Modified Paths:
--------------
    trunk/phase3/includes/FileDeleteForm.php
    trunk/phase3/includes/specials/SpecialUserlogin.php

Modified: trunk/phase3/includes/FileDeleteForm.php
===================================================================
--- trunk/phase3/includes/FileDeleteForm.php    2011-06-22 14:51:25 UTC (rev 
90587)
+++ trunk/phase3/includes/FileDeleteForm.php    2011-06-22 14:59:05 UTC (rev 
90588)
@@ -253,7 +253,7 @@
                        return wfMsgExt(
                                "{$message}-old", # To ensure grep will find 
them: 'filedelete-intro-old', 'filedelete-nofile-old', 'filedelete-success-old'
                                'parse',
-                               $this->title->getText(),
+                               wfEscapeWikiText( $this->title->getText() ),
                                $wgLang->date( $this->getTimestamp(), true ),
                                $wgLang->time( $this->getTimestamp(), true ),
                                wfExpandUrl( $this->file->getArchiveUrl( 
$this->oldimage ) ) );
@@ -261,7 +261,7 @@
                        return wfMsgExt(
                                $message,
                                'parse',
-                               $this->title->getText()
+                               wfEscapeWikiText( $this->title->getText() )
                        );
                }
        }

Modified: trunk/phase3/includes/specials/SpecialUserlogin.php
===================================================================
--- trunk/phase3/includes/specials/SpecialUserlogin.php 2011-06-22 14:51:25 UTC 
(rev 90587)
+++ trunk/phase3/includes/specials/SpecialUserlogin.php 2011-06-22 14:59:05 UTC 
(rev 90588)
@@ -831,7 +831,7 @@
 
                $wgOut->setPageTitle( wfMsg( 'loginsuccesstitle' ) );
                if( $msgname ){
-                       $wgOut->addWikiMsg( $msgname, $wgUser->getName() );
+                       $wgOut->addWikiMsg( $msgname, wfEscapeWikiText( 
$wgUser->getName() ) );
                }
                
                $wgOut->addHTML( $injected_html );


_______________________________________________
MediaWiki-CVS mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-cvs

Reply via email to