Change Details

As @bawolff pointed out in https://commons.wikimedia.org/w/index.php?title=Commons:Upload_help&diff=prev&oldid=140107883, the check I had for animating an element's href to a javascript url wasn't effective. Fix it to blacklist animating attributeName='xlink:href'. -------------------------- **Patch**: {F28648} - 1.24: (needed) - 1.23: (needed) - 1.19: (needed) **Affected Versions**: (needed) **Type**: xss **CVE**: (needed)

As @bawolff pointed out in https://commons.wikimedia.org/w/index.php?title=Commons:Upload_help&diff=prev&oldid=140107883, the check I had for animating an element's href to a javascript url wasn't effective. Fix it to blacklist animating attributeName='xlink:href'. -------------------------- **Patch**: {F28648} - 1.24: {F28648} (--3way) - 1.23: {F28648} (--3way) - 1.19: {F103791} **Affected Versions**: incomplete fix in patch for T71008 (1.19.19, 1.22.11 and 1.23.4) **Type**: xss **CVE**: (needed)

As @bawolff pointed out in https://commons.wikimedia.org/w/index.php?title=Commons:Upload_help&diff=prev&oldid=140107883, the check I had for animating an element's href to a javascript url wasn't effective. Fix it to blacklist animating attributeName='xlink:href'. -------------------------- **Patch**: {F28648} - 1.24: (needed{F28648} (--3way) - 1.23: (needed{F28648} (--3way) - 1.19: (needed){F103791} **Affected Versions**: (neededincomplete fix in patch for T71008 (1.19.19, 1.22.11 and 1.23.4) **Type**: xss **CVE**: (needed)