Last modified: 2013-09-04 02:15:54 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T44560, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 42560 - SMW messages aren't displaying any links
SMW messages aren't displaying any links
Status: RESOLVED WONTFIX
Product: MediaWiki extensions
Classification: Unclassified
Semantic MediaWiki (Other open bugs)
REL1_19-branch
PC Windows 7
: Unprioritized trivial (vote)
: MW 1.19 version
Assigned To: Nobody - You can work on this!
http://sevton.referata.com/wiki/Media...
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-11-30 00:22 UTC by Dylan Cuffy
Modified: 2013-09-04 02:15 UTC (History)
4 users (show)

See Also:
Web browser: Google Chrome
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments
This is what the message looks like when visitors see it. (It disappears if one is logged in.) (14.94 KB, image/png)
2012-11-30 00:22 UTC, Dylan Cuffy
Details
This is how it appears on normal edit forms. (13.90 KB, image/png)
2012-12-02 21:27 UTC, Dylan Cuffy
Details
A modified version of the standard message using regular HTML formatting. Note the <a> links, which are NOT allowed in MediaWiki. (18.97 KB, image/png)
2012-12-22 07:32 UTC, Dylan Cuffy
Details
This also happens with MediaWiki:Smw_types_docu on Special:Types. (20.12 KB, image/png)
2013-09-04 00:07 UTC, Dylan Cuffy
Details

Description Dylan Cuffy 2012-11-30 00:22:18 UTC
Created attachment 11435 [details]
This is what the message looks like when visitors see it. (It disappears if one is logged in.)

Originally posted on May 11, 2012 at <a href="http://www.referata.com/wiki/User_talk:Yaron_Koren">Yaron Koren's talk page</a> on <a href="http://www.referata.com">Referata</a>.
----
I've already customised a handful of system messages on <a href="http://sevton.referata.com">WikiSevton</a> relating to the SMW system. But one of them, <a href="http://sevton.referata.com/wiki/MediaWiki:Anoneditwarning">Anoneditwarning</a>, is now irking me the most. Though it displays correctly on edit forms like <a href="http://sevton.referata.com/w/index.php?title=Diane&action=edit">this one</a> (when viewed by visitors), the wikilinks and external links will refuse to do so in <a href="http://sevton.referata.com/wiki/Special:FormEdit/Character/Diane">this semantic form</a>.

Though I've tried getting around it with several parser tweaks, and looking at the page's source code with IE's F12 tools, I don't understand why all that raw code must taint the page. I really don't know why. Can you give an explanation (and hopefully a solution)?

(Version: MW 1.19.2; SMW 1.8 beta 2. Browsers: IE/Chrome [and possibly several others as well].)
Comment 1 Dylan Cuffy 2012-12-02 21:27:23 UTC
Created attachment 11450 [details]
This is how it appears on normal edit forms.
Comment 2 Dylan Cuffy 2012-12-22 07:32:52 UTC
Created attachment 11555 [details]
A modified version of the standard message using regular HTML formatting. Note the <a> links, which are NOT allowed in MediaWiki.
Comment 3 Dylan Cuffy 2013-09-04 00:07:29 UTC
Created attachment 13232 [details]
This also happens with MediaWiki:Smw_types_docu on Special:Types.
Comment 4 MWJames 2013-09-04 02:15:54 UTC
Messages are generally sanitized to shield against possible XSS attacks. Those messages seen on special pages need an appropriate escaping method to allow raw HTML being displayed as formatted text.

Adopting system messages (more specifically SMW messages) that inject raw HTML is in most cases not permitted [1] and will result in messages being displayed as "clear" string due to the sanitization process.

[1] https://github.com/wikimedia/mediawiki-extensions-SemanticMediaWiki/blob/master/includes/specials/SMW_SpecialTypes.php#L44

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links