https://bugzilla.wikimedia.org/show_bug.cgi?id=23024
Summary: Special:ListFiles doesn't escape filenames
Product: MediaWiki
Version: 1.16-svn
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: Normal
Component: Special pages
AssignedTo: [email protected]
ReportedBy: [email protected]
Created an attachment (id=7257)
--> (https://bugzilla.wikimedia.org/attachment.cgi?id=7257)
patch for includes/specials/SpecialListfiles.php
If the wiki includes an uploaded file whose name includes, say, '&', the output
of Special:ListFiles fails to parse when output as XHTML. This is because it
outputs the filename without passing through htmlspecialchars.
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
