);
}
- $text = MediaWikiServices::getInstance()->getContentLanguage()->convert( $nt->getText() );
- $plink = $this->getLinkRenderer()->makeLink( $nt, $text );
+ $text = MediaWikiServices::getInstance()->getContentLanguage()
+ ->convert( htmlspecialchars( $nt->getText() ) );
+ $plink = $this->getLinkRenderer()->makeLink( $nt, new HtmlArmor( $text ) );
$nlinks = $this->msg( 'nmembers' )->numParams( $result->value )->escaped();
return $this->getLanguage()->specialList( $plink, $nlinks );