Maniphest T101306

Ex:WikidataQualityConstraints - (hardening) use escaped() instead of text() output when inserting messages into HTML
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• csteipp
	Jun 3 2015, 8:44 PM

Tags

Referenced Files

None

Subscribers

Andreasburmeister

Lydia_Pintscher

Description

Use $msg->rawParas( $htmlContainingParameter )->escaped() when you need to insert html like links into a message

Related Objects
Search...

		Status	Subtype	Assigned	Task
		Resolved		Lydia_Pintscher	T99354 Review and deploy Wikibase-Quality-Constraints on wikidata.org
		Resolved		• csteipp	T99355 Security review of Wikibase-Quality-Constraints - v1 branch
		Resolved		dominic.sauer	T101306 Ex:WikidataQualityConstraints - (hardening) use escaped() instead of text() output when inserting messages into HTML

Event Timeline

• csteipp created this task.Jun 3 2015, 8:44 PM

• csteipp raised the priority of this task from to Needs Triage.

• csteipp updated the task description. (Show Details)

• csteipp added projects: Wikidata, Wikibase-Quality-Constraints, deprecated-security-team-reviews.

• csteipp added subscribers: Andreasburmeister, • csteipp, Tamslo and 4 others.

• csteipp mentioned this in T99355: Security review of Wikibase-Quality-Constraints - v1 branch.Jun 3 2015, 8:52 PM

• csteipp removed a project: deprecated-security-team-reviews.Jun 5 2015, 12:01 AM

• csteipp set Security to None.

soeren.oldag closed this task as Resolved.Jun 5 2015, 9:34 AM

soeren.oldag assigned this task to dominic.sauer.

Gerrit-Change: https://gerrit.wikimedia.org/r/#/c/216047/

Liuxinyu970226 unsubscribed.Jun 6 2015, 3:16 AM

Fix looks good

Aklapper removed a subscriber: Wikibase-Quality-Constraints.May 16 2023, 10:25 AM