After a discussion on mediawiki-enterprise (http://lists.wikimedia.org/pipermail/mediawiki-enterprise/2013-January/000117.html), #expr should use parseFormattedNumber to read wiki-language-formatted languages.
I talked to Niklas, the author of the original function, and he pointed out that it is not built to handle user input. Maybe this can be mitigated with a sanitizing function.
Version: unspecified
Severity: normal