Last modified: 2014-04-04 11:52:52 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T65404, the corresponding Phabricator task for complete and up-to-date bug report information.

Bug 63404 - CSS hijack by inline style


Summary:	CSS hijack by inline style

Status:	RESOLVED INVALID

Product:	MediaWiki
Classification:	Unclassified
Component:	Page editing (Other open bugs)
Version:	unspecified
Hardware:	All All

Importance:	Unprioritized minor (vote)
Target Milestone:	---
Assigned To:	Nobody - You can work on this!

URL:
Whiteboard:	aklapper-moreinfo
Keywords:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2014-04-02 07:01 UTC by jimyhuang
Modified:	2014-04-04 11:52 UTC (History)
CC List:	2 users (show)

See Also:
Web browser:	---
Mobile Platform:	---
Assignee Huggle Beta Tester:	---

Attachments
Whole page is white in wikipedia. (12.02 KB, image/png) 2014-04-02 07:01 UTC, jimyhuang	Details
Add an attachment (proposed patch, testcase, etc.)

Description jimyhuang 2014-04-02 07:01:08 UTC

Created attachment 15001 [details]
Whole page is white in wikipedia.

This line below will override page to white, and every user can do that easily.

&lt;div style="width: 200%; height: 200%; top: -50%;left: -50%; position:absolute;background-color: #FFFFFF; z-index: 255;"&gt;&lt;/div&gt;

This may duplicate with #35704 , but still leave this issue for track.

Comment 1 jimyhuang 2014-04-02 07:02:43 UTC

Correct div attached below:

<div style="width: 200%; height: 200%; top: -50%;left: -50%; position:absolute;background-color: #FFFFFF; z-index: 255;"></div>

Comment 2 Andre Klapper 2014-04-03 09:35:36 UTC

Thanks for taking the time to report this!

Why do you think there is a bug in the MediaWiki software?

Comment 3 Jackmcbarn 2014-04-03 18:31:33 UTC

I see no bug here. It looks like someone just vandalized that page.

Comment 4 Andre Klapper 2014-04-04 11:52:52 UTC

Closing this ticket as per comment 3.

Wikimedia Bugzilla is closed!

Search

Personal tools

Navigation

Links