| Index: branches/fundraising/extensions/DonationInterface/gateway_forms/OneStepTwoColumn.php |
| — | — | @@ -215,10 +215,10 @@ |
| 216 | 216 | $form .= Xml::openElement( 'div', array( 'id' => 'payflowpro_gateway-personal-info' ) ); |
| 217 | 217 | $form .= Xml::tags( 'h3', array( 'class' => 'payflow-cc-form-header', 'id' => 'payflow-cc-form-header-personal' ), wfMsg( 'payflowpro_gateway-make-your-donation' ) ); |
| 218 | 218 | if ( !$this->paypal ) { |
| 219 | | - $source = $wgRequest->getText( 'utm_source' ); |
| 220 | | - $medium = $wgRequest->getText( 'utm_medium' ); |
| 221 | | - $campaign = $wgRequest->getText( 'utm_campaign' ); |
| 222 | | - $formname = $wgRequest->getText( 'form_name' ); |
| | 219 | + $source = htmlspecialchars( $wgRequest->getText( 'utm_source' ) ); |
| | 220 | + $medium = htmlspecialchars( $wgRequest->getText( 'utm_medium' ) ); |
| | 221 | + $campaign = htmlspecialchars( $wgRequest->getText( 'utm_campaign' ) ); |
| | 222 | + $formname = htmlspecialchars( $wgRequest->getText( 'form_name' ) ); |
| 223 | 223 | $form .= Xml::Tags( 'p', array( 'id' => 'payflowpro_gateway-cc_otherways' ), wfMsg( 'payflowpro_gateway-paypal', $wgScriptPath, $formname, $source, $medium, $campaign ) ); |
| 224 | 224 | } |
| 225 | 225 | $form .= Xml::openElement( 'table', array( 'id' => 'payflow-table-donor' ) ); |