Escape output

See security advisory
miraheze · Feb 9, 2024 · 6942e8b · 6942e8b
1 parent 2ef0f50
commit 6942e8b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/includes/Helpers/ManageWikiTypes.php b/includes/Helpers/ManageWikiTypes.php
@@ -330,7 +330,7 @@ private static function common( $config, $disabled, $groupList, $name, $options,
 			case 'usergroups':
 				$groups = [];
 				foreach ( (array)$groupList as $group ) {
-					$groups[UserGroupMembership::getGroupName( $group )] = $group;
+					$groups[htmlspecialchars( UserGroupMembership::getGroupName( $group ) )] = $group;
 				}
 
 				$configs = [