https://bugzilla.wikimedia.org/show_bug.cgi?id=34763
--- Comment #5 from T. Gries <[email protected]> 2012-03-02 07:11:15 UTC --- Detailed description of the problem: ==================================== 1. function renderItem( $item ) renders each component (basically title, date, description) of each RSS feed item. 2. item descriptions are currently sanitized by function escapeTemplateParameter which includes htmlspecialchars. The call in renderItem could be replaced by Sanitizer::removeHTMLtags( item, null, array(), array( "a", "img" , "b", "u", "i", "s", ) ) or something like that. 3. renderItem replaces the string "{{{description}}}" in Template MediaWiki:Rss-item by the so-sanitized description, which is "HTML" but not "[[Wikitext]]". 4. the problem comes from renderFeed which must use Template MediaWiki:Rss-item which has the form {{MediaWiki:Rss-feed | title = {{{title}}} | link = {{{link}}} | date = {{{date}}} | author = {{{author}}} | description = {{{description}}} }} [*] (the template Rss-feed controls the layout of the feed, list form, bullets, indentation of feed items; {{{description}}} being replaced by "HTML" in step 3.) It must be parsed. Problem: "HTML" must not be further parsed. $wgOut->addHTML() is not the a solution per se, because, as I said, [*] needs to be parsed. How can I achieve this "do parse [*] but do not parse -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
