Wikimedia Bugzilla is closed!

Any i18n message that includes user generated content and at least one raw parameter is susceptible to having special sequences, like $1, from the user generated content replaced in the output.
 

Sample Code:

    $msg = new RawMessage( '$1 $2', array( 'First $2', 'Second $1' ) );
    echo $msg->text(), "\n";

    $msg = new RawMessage( '$1 $2', array( 'First $2', Message::rawParam( 'Second $1' ) ) );
    echo $msg->text(), "\n";

Expected Output:

    First $2 to the Second $1
    First $2 to the Second $1

Actual Output:

    First $2 to the Second $1
    First Second $1 to the Second $1


Utilizing Message::rawParam() should only change the result of that singular parameter, and not the entire message.