| Index: trunk/phase3/includes/specials/SpecialMIMEsearch.php |
| — | — | @@ -65,15 +65,15 @@ |
| 66 | 66 | |
| 67 | 67 | $nt = Title::makeTitle( $result->namespace, $result->title ); |
| 68 | 68 | $text = $wgContLang->convert( $nt->getText() ); |
| 69 | | - $plink = $skin->makeLink( $nt->getPrefixedText(), $text ); |
| | 69 | + $plink = $skin->makeLink( $nt->getPrefixedText(), htmlspecialchars($text) ); |
| 70 | 70 | |
| 71 | 71 | $download = $skin->makeMediaLinkObj( $nt, wfMsgHtml( 'download' ) ); |
| 72 | 72 | $bytes = wfMsgExt( 'nbytes', array( 'parsemag', 'escape'), |
| 73 | 73 | $wgLang->formatNum( $result->img_size ) ); |
| 74 | 74 | $dimensions = wfMsgHtml( 'widthheight', $wgLang->formatNum( $result->img_width ), |
| 75 | 75 | $wgLang->formatNum( $result->img_height ) ); |
| 76 | | - $user = $skin->link( Title::makeTitle( NS_USER, $result->img_user_text ), $result->img_user_text ); |
| 77 | | - $time = $wgLang->timeanddate( $result->img_timestamp ); |
| | 76 | + $user = $skin->link( Title::makeTitle( NS_USER, $result->img_user_text ), htmlspecialchars( $result->img_user_text ) ); |
| | 77 | + $time = htmlspecialchars( $wgLang->timeanddate( $result->img_timestamp ) ); |
| 78 | 78 | |
| 79 | 79 | return "($download) $plink . . $dimensions . . $bytes . . $user . . $time"; |
| 80 | 80 | } |
| — | — | @@ -90,6 +90,7 @@ |
| 91 | 91 | $wgOut->addHTML( |
| 92 | 92 | Xml::openElement( 'form', array( 'id' => 'specialmimesearch', 'method' => 'get', 'action' => SpecialPage::getTitleFor( 'MIMEsearch' )->getLocalUrl() ) ) . |
| 93 | 93 | Xml::openElement( 'fieldset' ) . |
| | 94 | + Xml::hidden( 'title', SpecialPage::getTitleFor( 'MIMEsearch' )->getPrefixedText() ) . |
| 94 | 95 | Xml::element( 'legend', null, wfMsg( 'mimesearch' ) ) . |
| 95 | 96 | Xml::inputLabel( wfMsg( 'mimetype' ), 'mime', 'mime', 20, $mime ) . ' ' . |
| 96 | 97 | Xml::submitButton( wfMsg( 'ilsubmit' ) ) . |