From 7dbf09ea72e330cb6975c0d15efff4194db4dbac Mon Sep 17 00:00:00 2001
From: umherirrender <umherirrender_de.wp@web.de>
Date: Sat, 7 Feb 2015 14:39:43 +0100
Subject: [PATCH] Escape messages on Special:Nuke

Bug: T85864
Change-Id: I194bb55c54791d5283c41c098a2fba15bcccb1bb
---
 Nuke_body.php | 13 +++++++------
 1 file changed, 7 insertions(+), 6 deletions(-)

diff --git a/Nuke_body.php b/Nuke_body.php
index 26ae386f..1afc0650 100644
--- a/Nuke_body.php
+++ b/Nuke_body.php
@@ -159,13 +159,14 @@ class SpecialNuke extends SpecialPage {
 		// Select: All, None
 		$links = array();
 		$links[] = '<a href="#" id="toggleall">' .
-			$this->msg( 'powersearch-toggleall' )->text() . '</a>';
+			$this->msg( 'powersearch-toggleall' )->escaped() . '</a>';
 		$links[] = '<a href="#" id="togglenone">' .
-			$this->msg( 'powersearch-togglenone' )->text() . '</a>';
+			$this->msg( 'powersearch-togglenone' )->escaped() . '</a>';
 		$out->addHTML(
 			Xml::tags( 'p',
 				null,
-				$this->msg( 'nuke-select', $this->getLanguage()->commaList( $links ) )->text()
+				$this->msg( 'nuke-select' )
+					->rawParams( $this->getLanguage()->commaList( $links ) )->escaped()
 			)
 		);
 
@@ -176,8 +177,8 @@ class SpecialNuke extends SpecialPage {
 
 		$out->addHTML( '<ul>' );
 
-		$wordSeparator = $this->msg( 'word-separator' )->text();
-		$commaSeparator = $this->msg( 'comma-separator' )->text();
+		$wordSeparator = $this->msg( 'word-separator' )->escaped();
+		$commaSeparator = $this->msg( 'comma-separator' )->escaped();
 
 		foreach ( $pages as $info ) {
 			/**
@@ -191,7 +192,7 @@ class SpecialNuke extends SpecialPage {
 			$userNameText = $userName ? $this->msg( 'nuke-editby', $userName )->parse() . $commaSeparator : '';
 			$changesLink = Linker::linkKnown(
 				$title,
-				$this->msg( 'nuke-viewchanges' )->text(),
+				$this->msg( 'nuke-viewchanges' )->escaped(),
 				array(),
 				array( 'action' => 'history' )
 			);