phpunit: Avoid use of deprecated getMock for PHPUnit 5 compat

[lhc/web/wiklou.git] / includes / cache / MessageCache.php
diff --git a/includes/cache/MessageCache.php b/includes/cache/MessageCache.php

index 7cd489a..70e1d9a 100644 (file)
--- a/includes/cache/MessageCache.php
+++ b/includes/cache/MessageCache.php
@@ -191,11 +191,16 @@ class MessageCache {
                                 // either.
                                 $po = ParserOptions::newFromAnon();
                                 $po->setEditSection( false );
+                               $po->setAllowUnsafeRawHtml( false );
                                 return $po;
                         }
  
                         $this->mParserOptions = new ParserOptions;
                         $this->mParserOptions->setEditSection( false );
+                       // Messages may take parameters that could come
+                       // from malicious sources. As a precaution, disable
+                       // the <html> parser tag when parsing messages.
+                       $this->mParserOptions->setAllowUnsafeRawHtml( false );
                 }
  
                 return $this->mParserOptions;