Mglaser has uploaded a new change for review.
https://gerrit.wikimedia.org/r/129554
Change subject: SECURITY: escape sortKey in pageInfo
......................................................................
SECURITY: escape sortKey in pageInfo
DEFAULTSORT isn't escaped before being added to the action=info table.
Bug: 63251
Change-Id: I087bfde8cbc69c3507f68ee3cb6e22aba0ffa7db
---
M includes/actions/InfoAction.php
1 file changed, 1 insertion(+), 0 deletions(-)
git pull ssh://gerrit.wikimedia.org:29418/mediawiki/core
refs/changes/54/129554/1
diff --git a/includes/actions/InfoAction.php b/includes/actions/InfoAction.php
index 7fc9033..0a16f4a 100644
--- a/includes/actions/InfoAction.php
+++ b/includes/actions/InfoAction.php
@@ -261,6 +261,7 @@
$sortKey = $pageProperties['defaultsort'];
}
+ $sortKey = htmlspecialchars( $sortKey );
$pageInfo['header-basic'][] = array( $this->msg(
'pageinfo-default-sort' ), $sortKey );
// Page length (in bytes)
--
To view, visit https://gerrit.wikimedia.org/r/129554
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I087bfde8cbc69c3507f68ee3cb6e22aba0ffa7db
Gerrit-PatchSet: 1
Gerrit-Project: mediawiki/core
Gerrit-Branch: REL1_22
Gerrit-Owner: Mglaser <[email protected]>
Gerrit-Reviewer: CSteipp <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
