dépôts
/
lhc
/
web
/
wiklou.git
/ blobdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Merge "HTML escape parameter 'text' of hook 'SkinEditSectionLinks'"
[lhc/web/wiklou.git]
/
includes
/
skins
/
Skin.php
diff --git
a/includes/skins/Skin.php
b/includes/skins/Skin.php
index
420c4cb
..
a34e833
100644
(file)
--- a/
includes/skins/Skin.php
+++ b/
includes/skins/Skin.php
@@
-1623,7
+1623,7
@@
abstract class Skin extends ContextSource {
$links = [
'editsection' => [
$links = [
'editsection' => [
- 'text' => $this->msg( 'editsection' )->inLanguage( $lang )->
escaped
(),
+ 'text' => $this->msg( 'editsection' )->inLanguage( $lang )->
text
(),
'targetTitle' => $nt,
'attribs' => $attribs,
'query' => [ 'action' => 'edit', 'section' => $section ],
'targetTitle' => $nt,
'attribs' => $attribs,
'query' => [ 'action' => 'edit', 'section' => $section ],
@@
-1639,7
+1639,7
@@
abstract class Skin extends ContextSource {
foreach ( $links as $k => $linkDetails ) {
$linksHtml[] = Linker::link(
$linkDetails['targetTitle'],
foreach ( $links as $k => $linkDetails ) {
$linksHtml[] = Linker::link(
$linkDetails['targetTitle'],
-
$linkDetails['text']
,
+
htmlspecialchars( $linkDetails['text'] )
,
$linkDetails['attribs'],
$linkDetails['query'],
$linkDetails['options']
$linkDetails['attribs'],
$linkDetails['query'],
$linkDetails['options']