$tpl->set( 'specialpageattributes', '' ); # obsolete
if ( $userlang !== $wgContLang->getHtmlCode() || $userdir !== $wgContLang->getDir() ) {
- $attrs = " lang='$userlang' dir='$userdir'";
+ $escUserlang = htmlspecialchars( $userlang );
+ $escUserdir = htmlspecialchars( $userdir );
+ // Attributes must be in double quotes because htmlspecialchars() doesn't
+ // escape single quotes
+ $attrs = " lang=\"$escUserlang\" dir=\"$escUserdir\"";
$tpl->set( 'userlangattributes', $attrs );
}
}
}
+ if ( isset( $createaccount_url ) ) {
+ $personal_urls['createaccount'] = $createaccount_url;
+ }
if( $this->showIPinHeader() ) {
$href = &$this->userpageUrlDetails['href'];
} else {
$personal_urls['login'] = $login_url;
}
- if ( isset($createaccount_url) ) {
- $personal_urls['createaccount'] = $createaccount_url;
- }
}
wfRunHooks( 'PersonalUrls', array( &$personal_urls, &$title ) );