Page Menu
Home
Phabricator
Search
Configure Global Search
Log In
Files
F65774953
T402076-2.patch
SomeRandomDeveloper
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Authored By
SomeRandomDeveloper
Aug 18 2025, 9:04 AM
2025-08-18 09:04:36 (UTC+0)
Size
953 B
Referenced Files
None
Subscribers
None
T402076-2.patch
View Options
From baa463893e1d2d36004301528cb5197fc9baf213 Mon Sep 17 00:00:00 2001
From: SomeRandomDeveloper <thisisnotmyname275@gmail.com>
Date: Mon, 18 Aug 2025 10:59:13 +0200
Subject: [PATCH] SECURITY: Mark
securepoll-translation-select-import-source-api as raw HTML
Add the message to RawHtmlMessages as it is inserted as HTML by the
extension.
Bug: T402076
Change-Id: Ie84a7ea6dd81409ac440ea6a3d15ed8f730297fc
---
extension.json | 3 +++
1 file changed, 3 insertions(+)
diff --git a/extension.json b/extension.json
index 285206ec..f2f69429 100644
--- a/extension.json
+++ b/extension.json
@@ -71,6 +71,9 @@
"SecurePollAlias": "SecurePoll.alias.php",
"SecurePollNamespaces": "SecurePoll.namespaces.php"
},
+ "RawHtmlMessages": [
+ "securepoll-translation-select-import-source-api"
+ ],
"AutoloadNamespaces": {
"MediaWiki\\Extension\\SecurePoll\\": "includes/",
"MediaWiki\\Extension\\SecurePoll\\Maintenance\\": "maintenance/"
--
2.50.1
File Metadata
Details
Attached
Mime Type
text/x-diff
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
21675029
Default Alt Text
T402076-2.patch (953 B)
Attached To
Mode
T402076: CVE-2025-11937: Stored XSS through a system message in SecurePoll
Attached
Detach File
Event Timeline
Log In to Comment