Add escaping for paranoia

Change-Id: I53fde56d67d5515deb4e296c14cc84d7a5cb1036
This commit is contained in:
Andrew Garrett 2012-08-01 10:53:20 -07:00
parent 429b608270
commit 3ede5a482a

View file

@ -50,7 +50,7 @@ class SpecialNotifications extends SpecialPage {
$class .= ' mw-echo-unread'; $class .= ' mw-echo-unread';
} }
$eventType = $event->getType(); $eventType = htmlspecialchars( $event->getType() );
$html .= "\t<li class=\"$class\" data-notification-type=\"$eventType\">$formatted</li>\n"; $html .= "\t<li class=\"$class\" data-notification-type=\"$eventType\">$formatted</li>\n";
} }