Semantic MediaWiki has reflected XSS in Special:Ask plain table headers

Failure mode When headers=plain, table header text was emitted into via a raw HTML path. User-controlled mainlabel content could therefore become executable HTML. Remediation - TableResultPrinter now applies output-context escaping before passing plain headers to the table renderer. - The fix is...