Page MenuHomePhabricator

Watchlist labels not escaped on Special:Watchlist
Closed, ResolvedPublicBUG REPORT

Description

  1. Create a label such as <strong>Lorem</strong>
  2. Note that it displays correctly in the Special:WatchlistLabels table
  3. Assign it to a page on your watchlist
  4. Edit that page (to ensure it appears on your watchlist)
  5. Open Special:Watchlist
  6. Note that 'Lorem' is shown in bold, instead of the full escaped HTML.

It is parsing the label as wikitext.

Details

Event Timeline

Restricted Application added a subscriber: Aklapper. · View Herald Transcript

Change #1239803 had a related patch set uploaded (by Samwilson; author: Samwilson):

[mediawiki/core@master] Escape watchlist labels on Special:Watchlist

https://gerrit.wikimedia.org/r/1239803

Change #1239803 merged by jenkins-bot:

[mediawiki/core@master] Escape watchlist labels on Special:Watchlist

https://gerrit.wikimedia.org/r/1239803

dom_walden subscribed.

I see watchlist labels being escaped in Special:Watchlist. The labels match how they look in Special:WatchlistLabels.

escaped_swatchlist.png (1,079×459 px, 185 KB)