Change Details

**Steps to reproduce:** # Log into a user account with the administrator group # Load Special:UserRights # Enter a username # Press submit # Add `&uselang=x-xss` to the end of the URL **What happens:** Several alerts appear with messages with text matching the regex `group-.*-member` **What should happen:** No alert boxes should appear Example: {F37853101} **Extra information** While this may have been already found, I'm reporting it now as the latest security release was just released so it may not have been found.

**Steps to reproduce:** # Log into a user account with the administrator group # Load Special:UserRights # Enter a username # Press submit # Add `&uselang=x-xss` to the end of the URL (to simulate MediaWiki namespace messages with JS code in them) **What happens:** Several alerts appear with messages with text matching the regex `group-.*-member` **What should happen:** No alert boxes should appear Example: {F37853101} **Extra information** While this may have been already found, I'm reporting it now as the latest security release was just released so it may not have been found.

**Steps to reproduce:** # Log into a user account with the administrator group # Load Special:UserRights # Enter a username # Press submit # Add `&uselang=x-xss` to the end of the URL (to simulate MediaWiki namespace messages with JS code in them) **What happens:** Several alerts appear with messages with text matching the regex `group-.*-member` **What should happen:** No alert boxes should appear Example: {F37853101} **Extra information** While this may have been already found, I'm reporting it now as the latest security release was just released so it may not have been found.