Page Menu
Home
Phabricator
Search
Configure Global Search
Log In
Files
F31700299
0001-T246602-master.patch
Reedy (Sam Reed)
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Award Token
Flag For Later
Authored By
Reedy
Mar 24 2020, 5:03 PM
2020-03-24 17:03:11 (UTC+0)
Size
1 KB
Referenced Files
None
Subscribers
None
0001-T246602-master.patch
View Options
From de9a361ffea2dd7bd61e31ee7764fc5632fd573d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bartosz=20Dziewo=C5=84ski?= <matma.rex@gmail.com>
Date: Mon, 2 Mar 2020 17:08:15 +0100
Subject: [PATCH] jquery.makeCollapsible: Escape user-generated CSS selectors
Bug: T246602
Change-Id: Iea64a258499ab597b9a8900418a42162fdb5f391
---
resources/src/jquery/jquery.makeCollapsible.js | 1 +
1 file changed, 1 insertion(+)
diff --git a/resources/src/jquery/jquery.makeCollapsible.js b/resources/src/jquery/jquery.makeCollapsible.js
index de307a69d9..32a5d3de72 100644
--- a/resources/src/jquery/jquery.makeCollapsible.js
+++ b/resources/src/jquery/jquery.makeCollapsible.js
@@ -243,6 +243,7 @@
} else {
collapsibleId = $collapsible.attr( 'id' ) || '';
if ( collapsibleId.indexOf( 'mw-customcollapsible-' ) === 0 ) {
+ collapsibleId = $.escapeSelector( collapsibleId );
$customTogglers = $( '.' + collapsibleId.replace( 'mw-customcollapsible', 'mw-customtoggle' ) )
.addClass( 'mw-customtoggle' );
}
--
2.17.1.windows.2
File Metadata
Details
Attached
Mime Type
text/x-diff
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
8338475
Default Alt Text
0001-T246602-master.patch (1 KB)
Attached To
Mode
T240393: Tracking bug for MediaWiki 1.31.7/1.33.3/1.34.1
Attached
Detach File
Event Timeline
Log In to Comment