Brian Wolff has uploaded a new change for review. ( 
https://gerrit.wikimedia.org/r/398911 )

Change subject: SECURITY: Fix escaping of description field
......................................................................

SECURITY: Fix escaping of description field

Bug: T118682

Change-Id: Ic40d258964d526a66431f18d2d7f0a6ad2eca111
---
M TemplateDataBlob.php
1 file changed, 1 insertion(+), 1 deletion(-)


  git pull ssh://gerrit.wikimedia.org:29418/mediawiki/extensions/TemplateData 
refs/changes/11/398911/1

diff --git a/TemplateDataBlob.php b/TemplateDataBlob.php
index b088ded..2f8af17 100644
--- a/TemplateDataBlob.php
+++ b/TemplateDataBlob.php
@@ -831,7 +831,7 @@
                                                'mw-templatedata-doc-muted' => 
( $paramObj->description === null )
                                        ]
                                ],
-                               Html::rawElement( 'p', [],
+                               Html::element( 'p', [],
                                        $paramObj->description !== null ?
                                        $paramObj->description :
                                        wfMessage( 
'templatedata-doc-param-desc-empty' )->inLanguage( $lang )->text()

-- 
To view, visit https://gerrit.wikimedia.org/r/398911
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: Ic40d258964d526a66431f18d2d7f0a6ad2eca111
Gerrit-PatchSet: 1
Gerrit-Project: mediawiki/extensions/TemplateData
Gerrit-Branch: master
Gerrit-Owner: Brian Wolff <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to