MediaWiki 1.15.0

[autoinstallsdev/mediawiki.git] / includes / specials / SpecialListUserRestrictions.php

diff --git a/includes/specials/SpecialListUserRestrictions.php b/includes/specials/SpecialListUserRestrictions.php
index 27b242982298621dc6bdaea90657dba79c48cdff..98e7111f1f9a66fd297cba28208c50dfb20d476c 100644 (file)
--- a/includes/specials/SpecialListUserRestrictions.php
+++ b/includes/specials/SpecialListUserRestrictions.php
@@ -24,9 +24,10 @@ function wfSpecialListUserRestrictions() {
 class SpecialListUserRestrictionsForm {
        public function getHTML() {
                global $wgRequest, $wgScript, $wgTitle;
+               $action = htmlspecialchars( $wgScript );
                $s = '';
                $s .= Xml::fieldset( wfMsg( 'listuserrestrictions-legend' ) );
-               $s .= "<form action=\"{$wgScript}\">";
+               $s .= "<form action=\"{$action}\">";
                $s .= Xml::hidden( 'title', $wgTitle->getPrefixedDbKey() );
                $s .= Xml::label( wfMsgHtml( 'listuserrestrictions-type' ), 'type' ) . '&nbsp;' .
                        self::typeSelector( 'type', $wgRequest->getVal( 'type' ), 'type' );