Last modified: 2014-07-23 08:31:00 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T70127, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 68127 - email address on Credits page strikes following text
email address on Credits page strikes following text
Status: RESOLVED DUPLICATE of bug 17663
Product: MediaWiki
Classification: Unclassified
Special pages (Other open bugs)
1.24rc
All All
: Low normal (vote)
: ---
Assigned To: Nobody - You can work on this!
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2014-07-16 21:43 UTC by db [inactive,noenotif]
Modified: 2014-07-23 08:31 UTC (History)
0 users

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description db [inactive,noenotif] 2014-07-16 21:43:45 UTC
Go to  https://en.wikipedia.org/wiki/Special:Version/Credits/BetaFeatures and wonder why some part is striked.

There is a email, which begins with <s. which is valid html tag and therefor text gets striked.

The <> from the credits page should be escaped when gets parsed.
Comment 1 Andre Klapper 2014-07-17 11:39:18 UTC
CC'ing Chris as I wonder if this could create some worse issues (though having a hard time to imagine).
Comment 2 Chris Steipp 2014-07-18 00:04:03 UTC
The credits file is parsed as wikitext, so any valid wikitext formatting can be used. But wikitext->html is safe from xss.
Comment 3 db [inactive,noenotif] 2014-07-23 08:31:00 UTC
When normal wikitext parsing is used here, than this is a duplicate of bug 40670/bug 17663

*** This bug has been marked as a duplicate of bug 17663 ***

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links