From c69b88dab74364aaa265683fd2641efdbdeddcdb Mon Sep 17 00:00:00 2001 From: "Alex Z." Date: Tue, 9 Sep 2008 20:14:14 +0000 Subject: [PATCH] modify r40671, use Sanitizer::escapeHtmlAllowEntities instead to allow & and the like. --- ImageMap_body.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ImageMap_body.php b/ImageMap_body.php index a914dd1..f3e1e4c 100644 --- a/ImageMap_body.php +++ b/ImageMap_body.php @@ -70,7 +70,7 @@ class ImageMap { if ( wfIsBadImage( $imageTitle->getDBkey() , $parser->mTitle ) ) { return self::error( 'imagemap_bad_image' ); } - $imageHTML = $parser->makeImage( $imageTitle, htmlspecialchars($options) ); + $imageHTML = $parser->makeImage( $imageTitle, Sanitizer::escapeHtmlAllowEntities($options) ); $parser->mOutput->addImage( $imageTitle->getDBkey() ); $domDoc = new DOMDocument();