https://bugzilla.wikimedia.org/show_bug.cgi?id=42560

MWJames <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|---                         |WONTFIX

--- Comment #4 from MWJames <[email protected]> ---
Messages are generally sanitized to shield against possible XSS attacks. Those
messages seen on special pages need an appropriate escaping method to allow raw
HTML being displayed as formatted text.

Adopting system messages (more specifically SMW messages) that inject raw HTML
is in most cases not permitted [1] and will result in messages being displayed
as "clear" string due to the sanitization process.

[1]
https://github.com/wikimedia/mediawiki-extensions-SemanticMediaWiki/blob/master/includes/specials/SMW_SpecialTypes.php#L44

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to