| Index: trunk/phase3/includes/SpecialSearch.php |
| — | — | @@ -30,7 +30,7 @@ |
| 31 | 31 | function wfSpecialSearch( $par = '' ) { |
| 32 | 32 | global $wgRequest, $wgUser; |
| 33 | 33 | |
| 34 | | - $search = $wgRequest->getText( 'search', $par ); |
| | 34 | + $search = str_replace( "\n", " ", $wgRequest->getText( 'search', $par ) ); |
| 35 | 35 | $searchPage = new SpecialSearch( $wgRequest, $wgUser ); |
| 36 | 36 | if( $wgRequest->getVal( 'fulltext' ) || |
| 37 | 37 | !is_null( $wgRequest->getVal( 'offset' ) ) || |
| Index: trunk/phase3/RELEASE-NOTES |
| — | — | @@ -104,6 +104,7 @@ |
| 105 | 105 | * (bug 11563) Deprecated SearchMySQL4 class; merged code to SearchMySQL |
| 106 | 106 | * (bug 12801) Fix link in subtitle message in AJAX search |
| 107 | 107 | * (bug 13428) Fix regression in protection form layout HTML validity |
| | 108 | +* (bug 9403) Sanitize newlines from search term input |
| 108 | 109 | |
| 109 | 110 | |
| 110 | 111 | === API changes in 1.13 === |