| Index: trunk/phase3/includes/Skin.php |
| — | — | @@ -1597,7 +1597,9 @@ |
| 1598 | 1598 | $link = $image->getPrefixedURL(); |
| 1599 | 1599 | $url = wfImageUrl( $name ); |
| 1600 | 1600 | $path = wfImagePath( $name ); |
| 1601 | | - |
| | 1601 | + |
| | 1602 | + $label = htmlspecialchars( $label ); |
| | 1603 | + |
| 1602 | 1604 | list($width, $height, $type, $attr) = getimagesize( $path ); |
| 1603 | 1605 | $cwidth = $boxwidth; |
| 1604 | 1606 | $cheight = intval( $height/($width/$cwidth) ); |