https://bugzilla.wikimedia.org/show_bug.cgi?id=48772
Web browser: ---
Bug ID: 48772
Summary: Protect Parsoid-generated token-names, about-ids,
typeofs from conflicts with user-provided names.
Product: Parsoid
Version: unspecified
Hardware: All
OS: All
Status: NEW
Severity: normal
Priority: Unprioritized
Component: JS/General
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]
Classification: Unclassified
Mobile Platform: ---
User can enter html tags or provide tag attributes or attribute values that
Parsoid (and downstream clients) treat specially.
Ex: #mwt3 for about-ids, or mw:Object/* for typeofs or <template> tags or any
of the special attributes/types found on
http://www.mediawiki.org/wiki/Parsoid/MediaWiki_DOM_spec
If Parsoid doesn't detect these and escape/handle them somehow, Parsoid will
mislead clients like VisualEditor and/or incorrectly serialize them.
--
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
