From: Niklas Laxström <niklas.laxstrom@gmail.com>
Date: Sat, 6 Dec 2014 09:52:47 +0000 (+0100)
Subject: Escape retrievedfrom message in the skin
X-Git-Tag: 1.31.0-rc.0~12885
X-Git-Url: https://git.heureux-cyclage.org/?p=lhc%2Fweb%2Fwiklou.git;a=commitdiff_plain;h=b780d900e3b36fb5b85bb58c61efaa2e32db984f

Escape retrievedfrom message in the skin

Change-Id: Ifd696ecd93c76e56cb21b3f2645367beeeeb5ba0
---

diff --git a/includes/skins/Skin.php b/includes/skins/Skin.php
index 1a4ec98b18..04c02d6607 100644
--- a/includes/skins/Skin.php
+++ b/includes/skins/Skin.php
@@ -646,8 +646,9 @@ abstract class Skin extends ContextSource {
 			$url = htmlspecialchars( wfExpandIRI( $this->getTitle()->getCanonicalURL() ) );
 		}
 
-		return $this->msg( 'retrievedfrom', '<a dir="ltr" href="' . $url
-			. '">' . $url . '</a>' )->text();
+		return $this->msg( 'retrievedfrom' )
+			->rawParams( '<a dir="ltr" href="' . $url. '">' . $url . '</a>' )
+			->escaped();
 	}
 
 	/**