| Index: trunk/phase3/includes/SkinTemplate.php |
| — | — | @@ -183,7 +183,7 @@ |
| 184 | 184 | wfProfileOut( __METHOD__."-stuff" ); |
| 185 | 185 | |
| 186 | 186 | wfProfileIn( __METHOD__."-stuff2" ); |
| 187 | | - $tpl->set( 'title', $out->getPageTitle() ); |
| | 187 | + $tpl->set( 'title', htmlspecialchars( $out->getPageTitle() ) ); |
| 188 | 188 | $tpl->set( 'pagetitle', $out->getHTMLTitle() ); |
| 189 | 189 | $tpl->set( 'displaytitle', $out->mPageLinkTitle ); |
| 190 | 190 | $tpl->set( 'pageclass', $this->getPageClasses( $this->mTitle ) ); |
| Index: trunk/phase3/includes/Skin.php |
| — | — | @@ -1018,7 +1018,7 @@ |
| 1019 | 1019 | |
| 1020 | 1020 | function pageTitle() { |
| 1021 | 1021 | global $wgOut; |
| 1022 | | - $s = '<h1 class="pagetitle">' . $wgOut->getPageTitle() . '</h1>'; |
| | 1022 | + $s = '<h1 class="pagetitle">' . htmlspecialchars( $wgOut->getPageTitle() ) . '</h1>'; |
| 1023 | 1023 | return $s; |
| 1024 | 1024 | } |
| 1025 | 1025 | |