https://bugzilla.wikimedia.org/show_bug.cgi?id=49232

       Web browser: ---
            Bug ID: 49232
           Summary: $wgWellFormedXml = false; breaks our EditPage broken
                    bot protection in edittoken
           Product: MediaWiki
           Version: unspecified
          Hardware: All
                OS: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: General/Unknown
          Assignee: [email protected]
          Reporter: [email protected]
    Classification: Unclassified
   Mobile Platform: ---

When `$wgWellFormedXml = false;` is set our edittoken changes to:
<input type=hidden value=+\ name=wpEditToken>

The purpose of the \ is to protect against broken bots that mistreat the \"
sequence treating it like a character escape.

We probably need to update Html.php so that it double quotes strings that end
in a \.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to