When using escapenoentities, decode entities
authorAryeh Gregor <simetrical@users.mediawiki.org>
Wed, 30 Jun 2010 23:08:31 +0000 (23:08 +0000)
committerAryeh Gregor <simetrical@users.mediawiki.org>
Wed, 30 Jun 2010 23:08:31 +0000 (23:08 +0000)
See r67090 for context.  Maybe it would be better to alter
normalizeCharReferences() instead?  I'm not sure where else it's called.

includes/Sanitizer.php

index 2a3f847..ce508c3 100644 (file)
@@ -1063,7 +1063,7 @@ class Sanitizer {
                # hurt.
                $html = htmlspecialchars( $html, ENT_QUOTES );
                $html = str_replace( '&amp;', '&', $html );
-               $html = Sanitizer::normalizeCharReferences( $html );
+               $html = Sanitizer::decodeCharReferences( $html );
                return $html;
        }