Author: Derick Rethans (derickr)
Date: 2025-09-10T10:08:01+01:00

Commit: 
https://github.com/php/web-wiki/commit/b9c825ea6cf07290102fe2c6e7b30a5305319787
Raw diff: 
https://github.com/php/web-wiki/commit/b9c825ea6cf07290102fe2c6e7b30a5305319787.diff

Upgrade to 2025-05-14b-librarian due to XSS security update

Changed paths:
  M  dokuwiki/inc/Ui/Search.php


Diff:

diff --git a/dokuwiki/inc/Ui/Search.php b/dokuwiki/inc/Ui/Search.php
index 62a25404..a26bfc93 100644
--- a/dokuwiki/inc/Ui/Search.php
+++ b/dokuwiki/inc/Ui/Search.php
@@ -302,7 +302,7 @@ protected function addNamespaceSelector(Form $searchForm)
         $currentWrapper = $searchForm->addTagOpen('div')->addClass('current');
         if ($baseNS) {
             $currentWrapper->addClass('changed');
-            $searchForm->addHTML('@' . $baseNS);
+            $searchForm->addHTML('@' . hsc($baseNS));
         } else {
             $searchForm->addHTML($lang['search_any_ns']);
         }
@@ -323,7 +323,7 @@ protected function addNamespaceSelector(Form $searchForm)
 
         foreach ($extraNS as $ns => $count) {
             $listItem = $searchForm->addTagOpen('li');
-            $label = $ns . ($count ? " <bdi>($count)</bdi>" : '');
+            $label = hsc($ns) . ($count ? " <bdi>($count)</bdi>" : '');
 
             if ($ns === $baseNS) {
                 $listItem->addClass('active');

Reply via email to