Jdlrobson added a comment.

This is not fixed.
You'll notice this generates the source:
<a title="Culver City" href="/wiki/File:Sony Pictures Entertainment banner.jpg">
the url has spaces rather than %20
Potentially in future this could be used as a vector of attack.

You can check it with 
https://validator.w3.org/nu/?doc=http%3A%2F%2Fpagebanner.wmflabs.org%2Fwiki%2FCulver+City


TASK DETAIL
  https://phabricator.wikimedia.org/T106321

EMAIL PREFERENCES
  https://phabricator.wikimedia.org/settings/panel/emailpreferences/

To: Jdlrobson
Cc: Jdlrobson, Tgr, gerritbot, Sumit, Aklapper, Wikidata-bugs, Lydia_Pintscher, 
Malyacko, P.Copp



_______________________________________________
Wikidata-bugs mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikidata-bugs

Reply via email to