Page MenuHomePhabricator

System allows to create new page as few HTML character as the page name.
Closed, DeclinedPublic

Description

Author: nadeejw

Description:
HTML character codes

Steps to reproduce:

  1. Enter following HTML character codes to the 'Search' text box.
  2. &
  3. ¢
  4. £
  5. ¥
  6. €
  7. §
  8. ©
  9. ®
  1. Click on the 'Go' button.

Actual results:
Pages can be created with the page name as the HTML result generated from the HTML character codes.
(Refer the screen shot)

Expected results:
System should display 'There were no results matching the query.' message.


Version: 1.18.x
Severity: major

Attached:

HTML_characer_codes_search.JPG (934×1 px, 108 KB)

Details

Reference
bz26767

Event Timeline

bzimport raised the priority of this task from to Lowest.Nov 21 2014, 11:12 PM
bzimport added a project: MediaWiki-Search.
bzimport set Reference to bz26767.
bzimport added a subscriber: Unknown Object (MLST).

The suggestion to create the page is not wrong. What's wrong is that the character is not encoded through htmlentities()[0] since it should present a way to create [[¢]] instead of "[[¢]]".

Although this case also asks for a check to see if a title is a valid page title (since ";" is not allowed in page names) - so in this case it shouldn't ask for it to be created after all.

Krinkle

[0] The same way {{PAGENAME}} is encoded in html entities. See also: http://commons.wikimedia.org/?oldid=48378112#testhello

Note, ; is allowed, you just can't have &entity; in a page name. I think the current behaviour makes sense. if someone types abcdé into the search box, i think they should be prompted to create [[Abcdé]].

Changing all WONTFIX high priority bugs to lowest priority (no mail should be generated since I turned it off for this.)