From 3d5392403ba07d96546f3eaedd78d93ebf44989b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Mat=C4=9Bj=20Such=C3=A1nek?= <matejsuchanek97@gmail.com>
Date: Sun, 22 Jan 2017 10:49:28 +0000
Subject: [PATCH] Escape url in Special:Log

When there is a "$1" in the url, it is treated like a message parameter
and replaced.

See https://www.wikidata.org/w/index.php?title=Special:Log&type=spamblacklist&page=Property:P2536.

Change-Id: Ia223a89e12c652a87d52a18c78e612b4b12871bc
---
 SpamBlacklistLogFormatter.php | 11 +++++++++++
 extension.json                |  3 ++-
 2 files changed, 13 insertions(+), 1 deletion(-)
 create mode 100644 SpamBlacklistLogFormatter.php

diff --git a/SpamBlacklistLogFormatter.php b/SpamBlacklistLogFormatter.php
new file mode 100644
index 00000000..187ec1ae
--- /dev/null
+++ b/SpamBlacklistLogFormatter.php
@@ -0,0 +1,11 @@
+<?php
+
+class SpamBlacklistLogFormatter extends LogFormatter {
+
+	protected function getMessageParameters() {
+		$params = parent::getMessageParameters();
+		$params[3] = Message::rawParam( htmlspecialchars( $params[3] ) );
+		return $params;
+	}
+
+}
\ No newline at end of file
diff --git a/extension.json b/extension.json
index d30d3038..d12b0611 100644
--- a/extension.json
+++ b/extension.json
@@ -28,7 +28,7 @@
 		"spamblacklist": "spamblacklistlog"
 	},
 	"LogActionsHandlers": {
-		"spamblacklist/*": "LogFormatter"
+		"spamblacklist/*": "SpamBlacklistLogFormatter"
 	},
 	"GrantPermissions": {
 		"viewrestrictedlogs": {
@@ -49,6 +49,7 @@
 		"EmailBlacklist": "EmailBlacklist.php",
 		"SpamBlacklistHooks": "SpamBlacklistHooks.php",
 		"SpamBlacklist": "SpamBlacklist_body.php",
+		"SpamBlacklistLogFormatter": "SpamBlacklistLogFormatter.php",
 		"SpamRegexBatch": "SpamRegexBatch.php",
 		"SpamBlacklistPreAuthenticationProvider": "SpamBlacklistPreAuthenticationProvider.php"
 	},