User "Nikerabbit" posted a comment on MediaWiki.r102049.

Full URL: http://www.mediawiki.org/wiki/Special:Code/MediaWiki/102049#c25544
Commit summary:

followup 102038: finer-grained escaping

Comment:

It does:
<source lang=php>
 php maintenance/eval.php 
 > echo Xml::tags( 'a', array( 'title' => '<script>alert("&amp;foo")</script>' 
 > ), '<b>a</b>' );
 <a 
title="&lt;script&gt;alert(&quot;&amp;amp;foo&quot;)&lt;/script&gt;"><b>a</b></a>
</source>

_______________________________________________
MediaWiki-CodeReview mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-codereview

Reply via email to