The first XSS in MintyDocs (T395376) using the mintydocs_topic parser function is still reproducible. It appears a part of the patch I submitted has not been applied:
diff --git a/includes/MintyDocsParserFunctions.php b/includes/MintyDocsParserFunctions.php index 9025277..068956a 100644 --- a/includes/MintyDocsParserFunctions.php +++ b/includes/MintyDocsParserFunctions.php @@ -256,8 +256,8 @@ class MintyDocsParserFunctions { foreach ( $processedParams as $paramName => $value ) { if ( $paramName == 'display name' ) { - $parserOutput->setPageProperty( 'MintyDocsDisplayName', $value ); - $displayTitle = $value; + $displayTitle = htmlspecialchars( $value, ENT_QUOTES ); + $parserOutput->setPageProperty( 'MintyDocsDisplayName', $displayTitle ); } elseif ( $paramName == 'toc name' ) { $tocDisplayTitle = $value; } elseif ( $paramName == 'inherit' && $value == null ) {
Creating a new task for this since the other one is already published.