Change Details

Steps to reproduce: # set `MediaWiki:Growthexperiments-homepage-suggestededits-tasktype-machine-description` to `<script>alert('xss')</script>` # visit `Special:Homepage` on desktop (or visit it on mobile and then click on the "Suggested edits" box)

Steps to reproduce: # set `MediaWiki:Growthexperiments-homepage-suggestededits-tasktype-machine-description` to `<script>alert('xss')</script>` # visit `Special:Homepage` on desktop (or visit it on mobile and then click on the "Suggested edits" box) (via TaskTypeSelectionWidget) ---- Same for `growthexperiments-homepage-suggestededits-pageviews` (via SuggestedEditCardWidget); only on desktop (and for certain tasks). ---- Same for `growthexperiments-addlink-summary-column-header-linked`, `growthexperiments-addlink-summary-column-header-suggestion` and `growthexperiments-addlink-summary-title` (via AddLinkSaveDialog); seen when opening an Add Link task from the homepage and opening the save dialog.

Steps to reproduce: # set `MediaWiki:Growthexperiments-homepage-suggestededits-tasktype-machine-description` to `<script>alert('xss')</script>` # visit `Special:Homepage` on desktop (or visit it on mobile and then click on the "Suggested edits" box) (via TaskTypeSelectionWidget) ---- Same for `growthexperiments-homepage-suggestededits-pageviews` (via SuggestedEditCardWidget); only on desktop (and for certain tasks). ---- Same for `growthexperiments-addlink-summary-column-header-linked`, `growthexperiments-addlink-summary-column-header-suggestion` and `growthexperiments-addlink-summary-title` (via AddLinkSaveDialog); seen when opening an Add Link task from the homepage and opening the save dialog.