| Index: trunk/extensions/Storyboard/specials/StoryReview/StoryReview_body.php |
| — | — | @@ -22,7 +22,7 @@ |
| 23 | 23 | } |
| 24 | 24 | |
| 25 | 25 | public function execute( $language ) { |
| 26 | | - wfProfileIn('StoryReview special page'); |
| | 26 | + wfProfileIn('StoryReview-special-page'); |
| 27 | 27 | |
| 28 | 28 | global $wgUser; |
| 29 | 29 | if ( $wgUser->isAllowed( 'storyreview' ) && !$wgUser->isBlocked() ) { |
| — | — | @@ -34,7 +34,7 @@ |
| 35 | 35 | $wgOut->permissionRequired( 'storyreview' ); |
| 36 | 36 | } |
| 37 | 37 | |
| 38 | | - wfProfileOut('StoryReview special page'); |
| | 38 | + wfProfileOut('StoryReview-special-page'); |
| 39 | 39 | } |
| 40 | 40 | |
| 41 | 41 | private function addOutput() { |
| — | — | @@ -102,9 +102,9 @@ |
| 103 | 103 | $segments[] = '<tr><td><table width="100%" border="1"><tr><td rowspan="2" width="200px">'; |
| 104 | 104 | $segments[] = '<img src="http://upload.wikimedia.org/wikipedia/mediawiki/9/99/SemanticMaps.png">'; // TODO: get cropped image here |
| 105 | 105 | $segments[] = '</td><td><b>'; |
| 106 | | - $segments[] = $story->story_title; |
| | 106 | + $segments[] = htmlspecialchars($story->story_title); |
| 107 | 107 | $segments[] = '</b><br />'; |
| 108 | | - $segments[] = $story->story_text; |
| | 108 | + $segments[] = htmlspecialchars($story->story_text); |
| 109 | 109 | $segments[] = '</td></tr><tr><td align="center" height="35">'; |
| 110 | 110 | $segments[] = '<button type="button">'; // TODO: figure out how to best update db info (page submit with form or onclick with ajax call?) |
| 111 | 111 | $segments[] = wfMsg('storyboard-publish'); |