jenkins-bot has submitted this change and it was merged. ( 
https://gerrit.wikimedia.org/r/398944 )

Change subject: SECURITY: Fix escaping of description field
......................................................................


SECURITY: Fix escaping of description field

Bug: T118682

Change-Id: Ic40d258964d526a66431f18d2d7f0a6ad2eca111
(cherry picked from commit f6c8566aa34fdc074f92e3b8f53cc3cbd76ca310)
---
M TemplateDataBlob.php
1 file changed, 1 insertion(+), 1 deletion(-)

Approvals:
  Legoktm: Looks good to me, approved
  jenkins-bot: Verified



diff --git a/TemplateDataBlob.php b/TemplateDataBlob.php
index b8c8078..826b438 100644
--- a/TemplateDataBlob.php
+++ b/TemplateDataBlob.php
@@ -817,7 +817,7 @@
                                                'mw-templatedata-doc-muted' => 
( $paramObj->description === null )
                                        ]
                                ],
-                               Html::rawElement( 'p', [],
+                               Html::element( 'p', [],
                                        $paramObj->description !== null ?
                                        $paramObj->description :
                                        wfMessage( 
'templatedata-doc-param-desc-empty' )->inLanguage( $lang )->text()

-- 
To view, visit https://gerrit.wikimedia.org/r/398944
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: Ic40d258964d526a66431f18d2d7f0a6ad2eca111
Gerrit-PatchSet: 1
Gerrit-Project: mediawiki/extensions/TemplateData
Gerrit-Branch: REL1_28
Gerrit-Owner: Legoktm <[email protected]>
Gerrit-Reviewer: Brian Wolff <[email protected]>
Gerrit-Reviewer: Legoktm <[email protected]>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to