https://bugzilla.wikimedia.org/show_bug.cgi?id=69798
--- Comment #3 from Nischay Nahata <[email protected]> --- Chris, Can you explain the points you made regarding escaping? This extension really just outputs data from the DB with no user input except a few options which should be validated by the FormOptions. I don't understand why is their any need to escape the HTML. Most of the code here is borrowed (and restructured) from core MW classes like ChangesListSpecialPage, SpecialRecentChanges and similar ones so if you could provide examples from them it would be helpful. -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
