Fixed: sanitation loop on ampersands in encodeAttribute() (this was MediaWiki's fault)
--- a/includes/wikiengine/Tables.php Sat Dec 01 00:35:42 2007 -0500
+++ b/includes/wikiengine/Tables.php Sat Dec 01 02:39:49 2007 -0500
@@ -277,6 +277,13 @@
* @return HTML-encoded text fragment
*/
function encodeAttribute( $text ) {
+
+ // In Enano 1.0.3, added this cheapo hack to keep ampersands
+ // from being double-sanitized. Thanks to markybob from #deluge.
+ $encValue = strtr( $text, array(
+ '&' => '&'
+ ) );
+
$encValue = htmlspecialchars( $text );
// Whitespace is normalized during attribute decoding,