From 905d77bc2bfac9d485ee4b0043d8b4b45f309e23 Mon Sep 17 00:00:00 2001
From: Brian Wolff <bawolff+wn@gmail.com>
Date: Thu, 28 Jan 2016 18:04:01 -0500
Subject: [PATCH] Make anchor for headlines escape > and <

As a hardening step against language converter and its crazy regexes.

Change-Id: I0d253611fbb8d12cb5c937e36fdb122efe186943
---
 includes/Linker.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/includes/Linker.php b/includes/Linker.php
index 80e4c62..e19c8d9 100644
--- a/includes/Linker.php
+++ b/includes/Linker.php
@@ -1779,11 +1779,13 @@ class Linker {
 	public static function makeHeadline( $level, $attribs, $anchor, $html,
 		$link, $legacyAnchor = false
 	) {
+		$anchor = htmlspecialchars( $anchor );
 		$ret = "<h$level$attribs"
 			. "<span class=\"mw-headline\" id=\"$anchor\">$html</span>"
 			. $link
 			. "</h$level>";
 		if ( $legacyAnchor !== false ) {
+			$legacyAnchor = htmlspecialchars( $legacyAnchor );
 			$ret = "<div id=\"$legacyAnchor\"></div>$ret";
 		}
 		return $ret;
-- 
2.0.1