mediawiki-extensions-SpamBl.../includes/SpamBlacklistLogFormatter.php

<?php

class SpamBlacklistLogFormatter extends LogFormatter {

	protected function getMessageParameters() {
		$params = parent::getMessageParameters();
		$params[3] = Message::rawParam( htmlspecialchars( $params[3] ) );
		return $params;
	}

}
Escape url in Special:Log When there is a "$1" in the url, it is treated like a message parameter and replaced. See https://www.wikidata.org/w/index.php?title=Special:Log&type=spamblacklist&page=Property:P2536. Change-Id: Ia223a89e12c652a87d52a18c78e612b4b12871bc 2017-01-22 10:49:28 +00:00			`<?php`

			`class SpamBlacklistLogFormatter extends LogFormatter {`

			`protected function getMessageParameters() {`
			`$params = parent::getMessageParameters();`
			`$params[3] = Message::rawParam( htmlspecialchars( $params[3] ) );`
			`return $params;`
			`}`

Add phpcs and make pass Change-Id: I623a982fe6362daab34906a111d123f19676dc22 2017-06-06 16:29:27 +00:00			`}`