SECURITY: Escape newpage message in FeedUtils

Bug: T386175
Change-Id: Ida72c4c03c379cf5a340b2f229f0fe842694559c
(cherry picked from commit 14205eb16d32439b745537906c1d37146b60793b)
This commit is contained in:
Lucas Werkmeister 2025-02-12 11:29:35 +01:00 committed by SBassett
parent 145d205b4c
commit c60a5c4206

View file

@ -251,7 +251,7 @@ class FeedUtils {
$diffText = Html::rawElement(
'p',
[],
Html::rawElement( 'b', [], wfMessage( 'newpage' )->text() )
Html::element( 'b', [], wfMessage( 'newpage' )->text() )
);
$diffText .= Html::rawElement( 'div', [], $html );
}