In getCategorySortkey: strip tabs and line feeds from the user-supplied category...

diff --git a/includes/Title.php b/includes/Title.php
index fd62d4d..c8fe7b8 100644 (file)
--- a/includes/Title.php
+++ b/includes/Title.php
@@ -4152,6 +4152,7 @@ class Title {
                        # Separate with a null byte, so the unprefixed part is only used as
                        # a tiebreaker when two pages have the exact same prefix -- null
                        # sorts before everything else (hopefully).
+                       $prefix = strtr( $prefix, "\n\t", '  ' );
                        return "$prefix\n$unprefixed";
                }
                return $unprefixed;