integration/msgstring/test.php:44 SecurityCheck-DoubleEscaped Calling method \MsgString::escapeIfNotMessageWithoutDocblock() in [no method] that outputs using tainted argument #1 (`$msg`). (Caused by: integration/msgstring/test.php +37) (Caused by: integration/msgstring/test.php +42; annotations in \MediaWiki\Message\Message::__toString) integration/msgstring/test.php:45 SecurityCheck-XSS Calling method \MsgString::echoIfNotMessage() in [no method] that outputs using tainted argument #1 (`$_GET['a']`). (Caused by: integration/msgstring/test.php +24) integration/msgstring/test.php:46 SecurityCheck-DoubleEscaped Calling method \MsgString::alwaysEscape() in [no method] that outputs using tainted argument #1 (`$msg`). (Caused by: integration/msgstring/test.php +29) (Caused by: integration/msgstring/test.php +42; annotations in \MediaWiki\Message\Message::__toString)