| Index: trunk/phase3/includes/FileDeleteForm.php |
| — | — | @@ -253,7 +253,7 @@ |
| 254 | 254 | return wfMsgExt( |
| 255 | 255 | "{$message}-old", # To ensure grep will find them: 'filedelete-intro-old', 'filedelete-nofile-old', 'filedelete-success-old' |
| 256 | 256 | 'parse', |
| 257 | | - $this->title->getText(), |
| | 257 | + wfEscapeWikiText( $this->title->getText() ), |
| 258 | 258 | $wgLang->date( $this->getTimestamp(), true ), |
| 259 | 259 | $wgLang->time( $this->getTimestamp(), true ), |
| 260 | 260 | wfExpandUrl( $this->file->getArchiveUrl( $this->oldimage ) ) ); |
| — | — | @@ -261,7 +261,7 @@ |
| 262 | 262 | return wfMsgExt( |
| 263 | 263 | $message, |
| 264 | 264 | 'parse', |
| 265 | | - $this->title->getText() |
| | 265 | + wfEscapeWikiText( $this->title->getText() ) |
| 266 | 266 | ); |
| 267 | 267 | } |
| 268 | 268 | } |
| Index: trunk/phase3/includes/specials/SpecialUserlogin.php |
| — | — | @@ -831,7 +831,7 @@ |
| 832 | 832 | |
| 833 | 833 | $wgOut->setPageTitle( wfMsg( 'loginsuccesstitle' ) ); |
| 834 | 834 | if( $msgname ){ |
| 835 | | - $wgOut->addWikiMsg( $msgname, $wgUser->getName() ); |
| | 835 | + $wgOut->addWikiMsg( $msgname, wfEscapeWikiText( $wgUser->getName() ) ); |
| 836 | 836 | } |
| 837 | 837 | |
| 838 | 838 | $wgOut->addHTML( $injected_html ); |