Follow-up r66933: escape the whole message instead of only the parameter
authorAlexandre Emsenhuber <ialex@users.mediawiki.org>
Thu, 27 May 2010 15:51:25 +0000 (15:51 +0000)
committerAlexandre Emsenhuber <ialex@users.mediawiki.org>
Thu, 27 May 2010 15:51:25 +0000 (15:51 +0000)
includes/specials/SpecialUserlogin.php

index 4f231e6..0a41b1f 100644 (file)
@@ -128,7 +128,7 @@ class LoginForm {
                global $wgOut;
 
                if ( $this->mEmail == '' ) {
-                       $this->mainLoginForm( wfMsgExt( 'noemail', 'parsemag', htmlspecialchars( $this->mName ) ) );
+                       $this->mainLoginForm( wfMsgExt( 'noemail', array( 'parsemag', 'escape' ), $this->mName ) );
                        return;
                }