https://bugzilla.wikimedia.org/show_bug.cgi?id=19517
Summary: Page titles in Special:Contributions are not HTML-
escaped
Product: MediaWiki
Version: unspecified
Platform: All
URL: http://en.wikipedia.org/w/index.php?title=Special:Contri
butions&dir=prev&limit=1&target=Amalthea%27%22%26lt
OS/Version: All
Status: NEW
Severity: enhancement
Priority: Normal
Component: User interface
AssignedTo: [email protected]
ReportedBy: [email protected]
See the URL above. For testing purposes I created the account
»Amalthea'"&lt« and found that browsers "fixed" the broken html entity
"&lt" and displayed a "<" instead - see the URL above. Apparently the
ampersand isn't escaped correctly on the contributions page,
Special:RecentPages didn't have that problem.
Fun could probably be had with some of the more disruptive entities. I don't
know if there's a HTML entity for the U+202E RIGHT-TO-LEFT OVERRIDE, but if so,
then ‮ this could be abused for some comedic effect.
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
