In the past, hooks can set an HTML error message via the second argument $abortError. After I402c6beb, the message is treated as wikitext and parsed (again), causing HTML tags which are unacceptable in wikitext shown on pages, where old extensions like TitleBlacklist parse error messages themselves and send HTML output as $abortError.
Version: 1.21.x
Severity: normal
URL: https://gerrit.wikimedia.org/r/17952
See Also:
https://bugzilla.wikimedia.org/show_bug.cgi?id=52191
https://bugzilla.wikimedia.org/show_bug.cgi?id=38894