Author: alj62888
Description:
Child elements under <results> are given the name of the page. It is easy to create pages with titles that result in illegal XML tag names. Just to name a few that I've tried:
4me
Some "quoted" text <- an important one for special purpose wikis
xml
Example query:
http://www.mywikidev.com/wiki/api.php?action=ask&query=[[Modification%20date::%3E4%20February%202013]]%20[[Has property::%2B]]|?Has property&format=xml
<?xml version="1.0"?>
<api>
<query> <printrequests> <printrequest label="" typeid="_wpg" mode="2" /> <printrequest label="Has property" typeid="_txt" mode="1" /> </printrequests> <results> <some_"quoted"_text fulltext="some "quoted" text" fullurl="http://www.mywikidev.com/wiki/index.php/some_%22quoted%22_text"> <printouts> <Has_property> <value>1234</value> </Has_property> </printouts> </some_"quoted"_text> </results> </query>
</api>
Workaround(s): Unknown, but would love to hear of one.
Version: unspecified
Severity: blocker