diff -r fea81844b9a5 -r 9d29f7e101d6 plugins/SpecialSearch.php
--- a/plugins/SpecialSearch.php Sun Aug 12 13:33:04 2007 -0400
+++ b/plugins/SpecialSearch.php Sun Aug 12 14:56:52 2007 -0400
@@ -396,7 +396,7 @@
$regex = '/(' . implode('|', $words2) . ')/i';
$pt = preg_replace($regex, '\\1', $pt);
- $title = preg_replace($regex, '\\1', $paths->pages[$page]['name']);
+ $title = preg_replace($regex, '\\1', htmlspecialchars($paths->pages[$page]['name']));
$cut_off = false;