Mglaser has submitted this change and it was merged.
Change subject: SECURITY: escape sortKey in pageInfo
......................................................................
SECURITY: escape sortKey in pageInfo
DEFAULTSORT isn't escaped before being added to the action=info table.
Bug: 63251
Change-Id: I087bfde8cbc69c3507f68ee3cb6e22aba0ffa7db
---
M includes/actions/InfoAction.php
1 file changed, 1 insertion(+), 0 deletions(-)
Approvals:
Mglaser: Verified; Looks good to me, approved
jenkins-bot: Verified
diff --git a/includes/actions/InfoAction.php b/includes/actions/InfoAction.php
index 7fc9033..0a16f4a 100644
--- a/includes/actions/InfoAction.php
+++ b/includes/actions/InfoAction.php
@@ -261,6 +261,7 @@
$sortKey = $pageProperties['defaultsort'];
}
+ $sortKey = htmlspecialchars( $sortKey );
$pageInfo['header-basic'][] = array( $this->msg(
'pageinfo-default-sort' ), $sortKey );
// Page length (in bytes)
--
To view, visit https://gerrit.wikimedia.org/r/129554
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: merged
Gerrit-Change-Id: I087bfde8cbc69c3507f68ee3cb6e22aba0ffa7db
Gerrit-PatchSet: 1
Gerrit-Project: mediawiki/core
Gerrit-Branch: REL1_22
Gerrit-Owner: Mglaser <[email protected]>
Gerrit-Reviewer: CSteipp <[email protected]>
Gerrit-Reviewer: Daniel Friesen <[email protected]>
Gerrit-Reviewer: Mglaser <[email protected]>
Gerrit-Reviewer: jenkins-bot <>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
