"Bawolff" posted a comment on MediaWiki.r111437. URL: http://www.mediawiki.org/wiki/Special:Code/MediaWiki/111437#c30964
Commit summary for MediaWiki.r111437: follow-up r111424 - Simplify some of the security checks that were doing the same thing multiple times, give prettier error messages. Bawolff's comment: The links come because it treats the error message as wikitext (due to the <code>->parse()</code>, and if you type a link into a random page, it will be auto-linked. The wikitext parser only links things with valid uri protocols. (And it won't link protocol relative urls, which would be perfectly valid to input into this extension). I'm not sure if there's really any risk of having them linked. A person could just as easily type the url directly in to the page. _______________________________________________ MediaWiki-CodeReview mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-codereview
