Jeroen De Dauw <> changed:

           What    |Removed                     |Added
             Status|ASSIGNED                    |RESOLVED
         Resolution|                            |FIXED

--- Comment #2 from Jeroen De Dauw <> 2010-09-29 
22:44:18 UTC ---
(In reply to comment #0)
> If you enter:
> <script>alert("CSS Vulnerability");</script>
> into the query window and click on the 'Find results' button, it will pop up 
> an
> alert window the the 'CSS Vulnerability' message.
> This works on all versions of Media wiki and the semantic extensions I have
> tried.
> Works in both Firefox and IE.

It looks like this vulnerability has already been fixed. I can not reproduce it
using the latest SMW. I'm not sure, but suspect I fixed it in 1.5. What version
are you using?

Configure bugmail:
------- You are receiving this mail because: -------
You are on the CC list for the bug.

Wikibugs-l mailing list

Reply via email to