https://bugzilla.wikimedia.org/show_bug.cgi?id=48802
Bawolff (Brian Wolff) <[email protected]> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |[email protected] --- Comment #2 from Bawolff (Brian Wolff) <[email protected]> --- (In reply to comment #0) > formatNum output is not escaped in many places in MediaWiki, but as > Nikerabbit > suggested formatNum doesn't necessarily return escaped string. Although there > is no language that uses <, > or & as digit or digit separator, we should > either escape formatNum or check if there are no special characters in > language > file (separatorTransformTable, digitTransformTable). Just to clarify, this is referring to html escaping, not wikitext escaping. (Just reading the bug title made me think this was like the issue with a pagename starting with a *). -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
