https://bugzilla.wikimedia.org/show_bug.cgi?id=24919

Aryeh Gregor <simetrical+wikib...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
                 CC|                            |simetrical+wikib...@gmail.c
                   |                            |om
         Resolution|FIXED                       |

--- Comment #2 from Aryeh Gregor <simetrical+wikib...@gmail.com> 2010-12-04 
23:28:45 UTC ---
Sanitizer.php comment:

     * To ensure we don't have to bother escaping anything, we also strip ', ",
     * & even if $wgExperimentalIds is true.  TODO: Is this the best tactic?
     * We also strip # because it upsets IE, and % because it could be
     * ambiguous if it's part of something that looks like a percent escape
     * (which don't work reliably in fragments cross-browser).

I did this to keep things simple.  There are probably places in the code where
someone outputs IDs without escaping on the theory that they can't contain
special characters, and people will probably continue to assume that in the
future even if we audit all existing uses.  Developers are not going to expect
id's to contain special characters.  So I think this should be WONTFIX.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to