diff options
| author | Umherirrender <umherirrender_de.wp@web.de> | 2023-10-06 22:14:38 +0200 |
|---|---|---|
| committer | Reedy <reedy@wikimedia.org> | 2023-12-18 15:41:17 +0000 |
| commit | 997891167d40c275f26c60af411edf7645170e66 (patch) | |
| tree | 5f6b8ac5efd828fb8b719507486f80ec62e2ebaa | |
| parent | 183334abde95ad4c27c98669f059ba5d2c095232 (diff) | |
logging: Fix non-escaped messages used in rights log
$groups is array of messages from Language::getGroupMemberName,
which are processed with Message::text() there and need escaping here.
Change-Id: I594f7e53baabd69fbb750695879b2c8acb8f2efe
(cherry picked from commit 3979b47cb06ba0167b48ad04c7c3022fc88a4bb5)
| -rw-r--r-- | includes/logging/RightsLogFormatter.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/includes/logging/RightsLogFormatter.php b/includes/logging/RightsLogFormatter.php index 90c1017d2f30..ac8f2c5cec5a 100644 --- a/includes/logging/RightsLogFormatter.php +++ b/includes/logging/RightsLogFormatter.php @@ -140,7 +140,7 @@ class RightsLogFormatter extends LogFormatter { $expiryFormatted, $expiryFormattedD, $expiryFormattedT )->parse(); } else { // the right does not expire; just insert the group name - $permList[] = $group; + $permList[] = htmlspecialchars( $group ); } next( $groups ); |