Last modified: 2011-08-29 16:02:06 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T32589, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 30589 - URLGetParameters: non-alphanumeric data coming from URL gets badly mangled
URLGetParameters: non-alphanumeric data coming from URL gets badly mangled
Status: NEW
Product: MediaWiki extensions
Classification: Unclassified
Other (Other open bugs)
unspecified
All All
: Normal normal (vote)
: ---
Assigned To: Nobody - You can work on this!
http://www.mediawiki.org/wiki/Extensi...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2011-08-26 16:36 UTC by Gervase Markham
Modified: 2011-08-29 16:02 UTC (History)
3 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description Gervase Markham 2011-08-26 16:36:44 UTC
http://www.mediawiki.org/wiki/Extension:UrlGetParameters

When getting data from the URL, this extension calls rawurlencode() on the data before writing it to the page. This makes it safe - scary things like < and > don't get through. But it mangles stuff! If something is URL encoded, it needs to be URL decoded and then HTML encoded.

Consequently, it should be doing the equivalent of htmlencode(urldecode($foo)).

Last checkin was by "yaron", so CCing both people of that name in this Bugzilla :-) (Sorry if you are the wrong yaron...)

The other people mentioned on the extension's page are "S.O.E. Ansems" and Ankit Garg", but I can't find either of them in this Bugzilla.

Gerv

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links