Page Menu
Home
Phabricator
Search
Configure Global Search
Log In
Files
F38006002
T348343.patch
Daimona
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Authored By
Daimona
Oct 6 2023, 6:19 PM
2023-10-06 18:19:16 (UTC+0)
Size
1 KB
Referenced Files
None
Subscribers
None
T348343.patch
View Options
From 4b848548ff215f8edb058ab83b24175a019b783b Mon Sep 17 00:00:00 2001
From: Daimona Eaytoy <daimona.wiki@gmail.com>
Date: Fri, 6 Oct 2023 20:14:37 +0200
Subject: [PATCH] SECURITY: Fix XSSs in EmailManager.js
Bug: T348343
Change-Id: I70d71c409193e904684dfb706d424b0a815fa6f6
---
.../ext.campaignEvents.specialeventdetails/EmailManager.js | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/resources/ext.campaignEvents.specialeventdetails/EmailManager.js b/resources/ext.campaignEvents.specialeventdetails/EmailManager.js
index ab3c6eb..19a7f0c 100644
--- a/resources/ext.campaignEvents.specialeventdetails/EmailManager.js
+++ b/resources/ext.campaignEvents.specialeventdetails/EmailManager.js
@@ -123,14 +123,14 @@
}
if ( allSelected ) {
- this.$recipientsListElement.append(
+ this.$recipientsListElement.text(
mw.message( 'campaignevents-email-participants-all' ).text() );
return;
}
if ( this.recipientsList.length > 1 ) {
if ( participantsManager.selectAllParticipantsCheckbox.selected ) {
- this.$recipientsListElement.append(
+ this.$recipientsListElement.text(
mw.message(
'campaignevents-email-participants-except-count',
mw.language.convertNumber(
@@ -138,7 +138,7 @@
) ).text() );
return;
}
- this.$recipientsListElement.append(
+ this.$recipientsListElement.text(
mw.message(
'campaignevents-email-participants-count',
mw.language.convertNumber(
--
2.34.1
File Metadata
Details
Attached
Mime Type
text/x-diff
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
11650159
Default Alt Text
T348343.patch (1 KB)
Attached To
Mode
T348343: CVE-2024-23171: Various i18n-based XSSs in Special:EventDetails
Attached
Detach File
Event Timeline
Log In to Comment