Index: trunk/extensions/SemanticMediaWiki/specials/AskSpecial/SMW_SpecialAsk.php |
— | — | @@ -552,10 +552,11 @@ |
553 | 553 | $url = htmlspecialchars( $skin->makeSpecialUrl( 'Ask', "showformatoptions=\" + this.value + \"" ) ); |
554 | 554 | |
555 | 555 | foreach ( $this->m_params as $param => $value ) { |
556 | | - if ( $param !== 'format' ) $url .= '¶ms[' . Xml::escapeJsString( $param ) . ']=' . Xml::escapeJsString( $value ); |
| 556 | + if ( $param !== 'format' ) { |
| 557 | + $url .= '¶ms[' . Xml::escapeJsString( $param ) . ']=' . Xml::escapeJsString( $value ); |
| 558 | + } |
557 | 559 | } |
558 | 560 | |
559 | | - // FIXME: $url == XSS |
560 | 561 | $result .= "<br /><br />\n<p>" . wfMsg( 'smw_ask_format_as' ) . ' <input type="hidden" name="eq" value="yes"/>' . "\n" . |
561 | 562 | '<select id="formatSelector" name="p[format]" onChange="JavaScript:xmlhttpPost(\'' . $url . '\')">' . "\n" . |
562 | 563 | ' <option value="broadtable"' . ( $this->m_params['format'] == 'broadtable' ? ' selected' : '' ) . '>' . |
Index: trunk/extensions/SemanticMediaWiki/includes/SMW_SetupLight.php |
— | — | @@ -14,7 +14,7 @@ |
15 | 15 | * @ingroup SMW |
16 | 16 | */ |
17 | 17 | |
18 | | -define( 'SMW_VERSION', '1.5.3-light rc3' ); |
| 18 | +define( 'SMW_VERSION', '1.5.3-light rc4' ); |
19 | 19 | |
20 | 20 | require_once( 'SMW_GlobalFunctions.php' ); |
21 | 21 | |
Index: trunk/extensions/SemanticMediaWiki/includes/SMW_Setup.php |
— | — | @@ -8,7 +8,7 @@ |
9 | 9 | */ |
10 | 10 | |
11 | 11 | // The SMW version number. |
12 | | -define( 'SMW_VERSION', '1.5.3 rc3' ); |
| 12 | +define( 'SMW_VERSION', '1.5.3 rc4' ); |
13 | 13 | |
14 | 14 | // A flag used to indicate SMW defines a semantic extension type for extension crdits. |
15 | 15 | define( 'SEMANTIC_EXTENSION_TYPE', true ); |