| Index: trunk/extensions/ImageMap/ImageMap_body.php |
| — | — | @@ -70,7 +70,7 @@ |
| 71 | 71 | if ( wfIsBadImage( $imageTitle->getDBkey() , $parser->mTitle ) ) { |
| 72 | 72 | return self::error( 'imagemap_bad_image' ); |
| 73 | 73 | } |
| 74 | | - $imageHTML = $parser->makeImage( $imageTitle, htmlspecialchars($options) ); |
| | 74 | + $imageHTML = $parser->makeImage( $imageTitle, Sanitizer::escapeHtmlAllowEntities($options) ); |
| 75 | 75 | $parser->mOutput->addImage( $imageTitle->getDBkey() ); |
| 76 | 76 | |
| 77 | 77 | $domDoc = new DOMDocument(); |