Page MenuHomePhabricator

Subject/headline previews for new talk sections not sanitized correctly: template call partially processed
Closed, ResolvedPublic

Description

Seen on version 1.21wmf11 (English Wikipedia live).

  • On any talk page, use the new section widget.
  • In the resulting form, put {{<name>}} (where <name> is the name of any template that contains wiki links) in the subject/headline field.
  • Hit show preview.

The template call is partially processed, and the resulting output will appear in the subject/headline preview with clickable links in. Any files present in the template will be rendered as links, with the link text being one of the file parameters.

Wrapping the template call in nowiki tags:

<nowiki>{{<name>}}</nowiki>

results in the template not being processed in the page preview, as expected, but does not affect the subject/headline preview, presumably because the tag has been removed as part of sanitizing HTML content.


Version: 1.21.x
Severity: normal

Details

Reference
bz46326

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 22 2014, 1:30 AM
bzimport added a project: MediaWiki-Parser.
bzimport set Reference to bz46326.
bzimport added a subscriber: Unknown Object (MLST).
Hex claimed this task.

Someone's fixed it.