diff options
| author | Pierre Schmitz <pierre@archlinux.de> | 2012-06-13 23:40:19 +0200 |
|---|---|---|
| committer | Pierre Schmitz <pierre@archlinux.de> | 2012-06-13 23:40:19 +0200 |
| commit | 588cc40aeec0165400421ef9612e81b6d2c7b936 (patch) | |
| tree | 85f1e86ba187fbc81ef42393433f1fa5aa6defb3 /includes/SkinTemplate.php | |
| parent | 67674d7a741c7c1de947f30ceb1ab3b35283308e (diff) | |
Update to MediaWiki 1.19.1
Diffstat (limited to 'includes/SkinTemplate.php')
| -rw-r--r-- | includes/SkinTemplate.php | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/includes/SkinTemplate.php b/includes/SkinTemplate.php index e41b5e7d..2dd00980 100644 --- a/includes/SkinTemplate.php +++ b/includes/SkinTemplate.php @@ -298,7 +298,11 @@ class SkinTemplate extends Skin { $tpl->set( 'specialpageattributes', '' ); # obsolete if ( $userlang !== $wgContLang->getHtmlCode() || $userdir !== $wgContLang->getDir() ) { - $attrs = " lang='$userlang' dir='$userdir'"; + $escUserlang = htmlspecialchars( $userlang ); + $escUserdir = htmlspecialchars( $userdir ); + // Attributes must be in double quotes because htmlspecialchars() doesn't + // escape single quotes + $attrs = " lang=\"$escUserlang\" dir=\"$escUserdir\""; $tpl->set( 'userlangattributes', $attrs ); } |