From 04938d13462bd42816783ef5fb21afc5c4808aac Mon Sep 17 00:00:00 2001 From: Alexander Vorwerk Date: Thu, 30 Sep 2021 00:16:31 +0200 Subject: [PATCH] SECURITY: Pass escaped HTML to FullSearchResultWidget::buildMeta Bug: T285515 Change-Id: I5d2a4d10bb995afab2332dc7b291b41281b731ed --- includes/widget/search/FullSearchResultWidget.php | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/includes/widget/search/FullSearchResultWidget.php b/includes/widget/search/FullSearchResultWidget.php index af1e02754c..f036639a67 100644 --- a/includes/widget/search/FullSearchResultWidget.php +++ b/includes/widget/search/FullSearchResultWidget.php @@ -54,9 +54,11 @@ class FullSearchResultWidget implements SearchResultWidget { $redirect = $this->generateRedirectHtml( $result ); $section = $this->generateSectionHtml( $result ); $category = $this->generateCategoryHtml( $result ); - $date = $this->specialPage->getLanguage()->userTimeAndDate( - $result->getTimestamp(), - $this->specialPage->getUser() + $date = htmlspecialchars( + $this->specialPage->getLanguage()->userTimeAndDate( + $result->getTimestamp(), + $this->specialPage->getUser() + ) ); list( $file, $desc, $thumb ) = $this->generateFileHtml( $result ); $snippet = $result->getTextSnippet( $terms ); -- 2.17.1