add htmlspecialchars for wikitext label back in after testing

StarCitizenTools · Jan 25, 2025 · d7f5ca0 · d7f5ca0
1 parent 24227a4
commit d7f5ca0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/includes/Tabber.php b/includes/Tabber.php
@@ -197,7 +197,7 @@ private static function getTabData( string $tab, int $count, Parser $parser, PPF
 			// plain text label has already been passed through 'htmlspecialchars' in 'convertHtml' of 'getTabLabel'
 			$id = Sanitizer::escapeIdForAttribute( $label );
 		} else {
-			$id = Sanitizer::escapeIdForAttribute( $label );
+			$id = Sanitizer::escapeIdForAttribute( htmlspecialchars( $label ) );
 		}
 
 		if ( self::$useLegacyId === true ) {