https://bugzilla.wikimedia.org/show_bug.cgi?id=20655

           Summary: unescaped HTML in delete-page interface
           Product: MediaWiki extensions
           Version: any
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: Normal
         Component: UsabilityInitiative
        AssignedTo: [email protected]
        ReportedBy: [email protected]
                CC: [email protected]


Create a page that includes say, a '<' character very near the beginning.  Then
select 'Delete' while using the Vector skin.  The "Other/additional reason"
form field will contain a literal '<' character in its value attribute, which
is invalid XHTML.  This makes the page unviewable on sites that use the
application/xhtml+xml content type to serve MathML content.


-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to