[MediaWiki-CVS] SVN: [114852] trunk/extensions/PageTriage/SpecialPageTriage.php

[bsitu]

https://www.mediawiki.org/wiki/Special:Code/MediaWiki/114852

Revision: 114852
Author:   bsitu
Date:     2012-04-11 18:41:19 +0000 (Wed, 11 Apr 2012)
Log Message:
-----------
escape display data

Modified Paths:
--------------
    trunk/extensions/PageTriage/SpecialPageTriage.php

Modified: trunk/extensions/PageTriage/SpecialPageTriage.php
===================================================================
--- trunk/extensions/PageTriage/SpecialPageTriage.php   2012-04-11 18:34:29 UTC 
(rev 114851)
+++ trunk/extensions/PageTriage/SpecialPageTriage.php   2012-04-11 18:41:19 UTC 
(rev 114852)
@@ -97,7 +97,7 @@
                                                <div class="mwe-pt-info-pane 
mwe-pt-info-pane-odd">
                                        <% } %>
                                                        <div 
class="mwe-pt-article">
-                                                               <span 
class="mwe-pt-page-title"><a href="<%= mw.util.wikiGetlink( title ) %>"><%= 
title %></a></span>
+                                                               <span 
class="mwe-pt-page-title"><a href="<%= mw.util.wikiGetlink( title ) %>"><%= 
mw.html.escape( title ) %></a></span>
                                                                <span 
class="mwe-pt-histlink">
                                                                        (<a 
href="<%= mw.config.get("wgScriptPath") + "/index.php?title=" + title_url + 
"&action=history" %>"><%= gM( "pagetriage-hist" ) %></a>)
                                                                </span>
@@ -124,7 +124,7 @@
                                                        <div 
class="mwe-pt-author">
                                                        <% if( typeof( 
user_name ) != 'undefined' ) { %>
                                                                <%= gM( 
'pagetriage-byline' ) %>
-                                                               <a <%= 
userPageLinkClass %> href="<%= user_title.getUrl() %>"><%= user_name %></a>
+                                                               <a <%= 
userPageLinkClass %> href="<%= user_title.getUrl() %>"><%= mw.html.escape( 
user_name ) %></a>
                                                                <span 
class="mwe-pt-talk-contribs">
                                                                        (<a <%= 
talkPageLinkClass %> href="<%= user_talk_title.getUrl()+'&redlink=1' 
%>">talk</a>
                                                                        &#xb7;
@@ -156,7 +156,7 @@
                                                        <% } %>
                                                        </div>
                                                        <div 
class="mwe-pt-snippet">
-                                                               <%= snippet %>
+                                                               <%= 
mw.html.escape( snippet ) %>
                                                        </div>
                                                </div>
                                        </div>


_______________________________________________
MediaWiki-CVS mailing list
MediaWiki-CVS@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-cvs