Add taint annotation to HtmlForm::getHTML()
authorBrian Wolff <bawolff+wn@gmail.com>
Fri, 31 Aug 2018 19:32:46 +0000 (19:32 +0000)
committerBrian Wolff <bawolff+wn@gmail.com>
Fri, 31 Aug 2018 19:32:46 +0000 (19:32 +0000)
This is to help AbuseFilter pass phan-taint-check.

Change-Id: I73a6a626337037f6b0cee04b0afb5a59907d3be6

includes/htmlform/HTMLForm.php

index 8e78459..9a78fd8 100644 (file)
@@ -1029,6 +1029,7 @@ class HTMLForm extends ContextSource {
         * @param bool|string|array|Status $submitResult Output from HTMLForm::trySubmit()
         *
         * @return string HTML
         * @param bool|string|array|Status $submitResult Output from HTMLForm::trySubmit()
         *
         * @return string HTML
+        * @return-taint escaped
         */
        public function getHTML( $submitResult ) {
                # For good measure (it is the default)
         */
        public function getHTML( $submitResult ) {
                # For good measure (it is the default)