| Index: trunk/extensions/SemanticForms/specials/SF_FormStart.php |
| — | — | @@ -76,7 +76,7 @@ |
| 77 | 77 | // if there was no page title, it's |
| 78 | 78 | // probably an invalid page name, |
| 79 | 79 | // containing forbidden characters |
| 80 | | - $error_msg = wfMsg( 'sf_formstart_badtitle', $page_name ); |
| | 80 | + $error_msg = wfMsg( 'sf_formstart_badtitle', htmlspecialchars( $page_name ) ); |
| 81 | 81 | $wgOut->addHTML( $error_msg ); |
| 82 | 82 | return; |
| 83 | 83 | } else { |