Last modified: 2012-02-29 22:59:32 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T36784, the corresponding Phabricator task for complete and up-to-date bug report information.

Bug 34784 - XSS-warning in SMW


Summary:	XSS-warning in SMW

Status:	RESOLVED WORKSFORME

Product:	MediaWiki extensions
Classification:	Unclassified
Component:	Semantic MediaWiki (Other open bugs)
Version:	unspecified
Hardware:	All All

Importance:	Unprioritized normal with 1 vote (vote)
Target Milestone:	---
Assigned To:	Nobody - You can work on this!

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2012-02-28 23:59 UTC by [[kgh]]
Modified:	2012-02-29 22:59 UTC (History)
CC List:	3 users (show)

See Also:
Web browser:	---
Mobile Platform:	---
Assignee Huggle Beta Tester:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description [[kgh]] 2012-02-28 23:59:35 UTC

[NoScript XSS] Eine verdächtige Anfrage wurde bereinigt. Original-URL [http://semantic-mediawiki.org/wiki/Translatewiki.net%20(de)] angefordert von [chrome://browser/content/browser.xul]. Bereinigte URL: [http://semantic-mediawiki.org/wiki/Translatewiki.net%20%20de%20#8628559137054512309].

My translation:
[NoScript XSS] A suspect requrest was detected. Original-URL [http://semantic-mediawiki.org/wiki/Translatewiki.net%20(de)] requested from  [chrome://browser/content/browser.xul]. Amended URL: [http://semantic-mediawiki.org/wiki/Translatewiki.net%20%20de%20#8628559137054512309].

Comment 1 Jeroen De Dauw 2012-02-29 00:05:16 UTC

Where are you seeing this?

Comment 2 [[kgh]] 2012-02-29 00:06:53 UTC

That is the output of the browsers console (Fx 10) generated by a popup that tries to prevent me from creating this page.

Comment 3 Jeroen De Dauw 2012-02-29 00:40:41 UTC

I can hit the page without getting any notice in the JS console in either FF or Chromium...

Comment 4 [[kgh]] 2012-02-29 00:53:15 UTC

Did you try after I created the page or before? However, tying to create a page like Referata.com (de) shows the same result. I checked Ch. This one is ok. Hmm...

Comment 5 Jeroen De Dauw 2012-02-29 18:07:15 UTC

Do you have noscript enabled? Or just installed?

And what makes you think this error comes from SMW?

Comment 6 [[kgh]] 2012-02-29 22:59:32 UTC

Yeah and it might be the problem. Still there must be an other plugin involved. I have done some more testing with O, Ch, IE and even on an other Fx installation + noscript without successfull recreation, which is good.

I thought that it might be SMW since I believed I had tested this on an MW installation without SMW. I also proved myself being wrong with this one.

Since it proved to be a mess with my browser I am changing the status to RESOLVED WORKSFORME

I am sorry for having generated inconveniences.

Wikimedia Bugzilla is closed!

Search

Personal tools

Navigation

Links