Change Details

Now quotes stop external links: [http://test.wikipedia.org/w/api.php?action=opensearch&search="Foo+Bar" Foo Bar] http://test.wikipedia.org/w/api.php?action=opensearch&search="Foo+Bar" Produce: <a href="http://test.wikipedia.org/w/api.php?action=opensearch&search=">"Foo+Bar" Foo Bar</a> <a href="http://test.wikipedia.org/w/api.php?action=opensearch&search=">http://test.wikipedia.org/w/api.php?action=opensearch&search=</a>"Foo+Bar" If you try to escape them with &quot; you don't get " or &quot; at the url, but \" (urlescaped) [http://test.wikipedia.org/w/api.php?action=opensearch&search=&quot;Foo+Bar&quot; Foo Bar] http://test.wikipedia.org/w/api.php?action=opensearch&search=&quot;Foo+Bar&quot; Produce: <a href="http://test.wikipedia.org/w/api.php?action=opensearch&amp;search=%5C%22Foo+Bar%5C%22">Foo Bar</a> <a href="http://test.wikipedia.org/w/api.php?action=opensearch&amp;search=%5C%22Foo+Bar&amp;quot">http://test.wikipedia.org/w/api.php?action=opensearch&amp;search=%5C%22Foo+Bar&amp;quot</a> -------------------------- **Version**: 1.24rc **Severity**: normal

Now quotes stop external links: ``` [http://test.wikipedia.org/w/api.php?action=opensearch&search="Foo+Bar" Foo Bar] http://test.wikipedia.org/w/api.php?action=opensearch&search="Foo+Bar" ``` Produce: ``` <a href="http://test.wikipedia.org/w/api.php?action=opensearch&search=">"Foo+Bar" Foo Bar</a> <a href="http://test.wikipedia.org/w/api.php?action=opensearch&search=">http://test.wikipedia.org/w/api.php?action=opensearch&search=</a>"Foo+Bar" ``` If you try to escape them with `&quot;` you don't get `"` or `&quot;` at the url, but `\"` (urlescaped) ``` [http://test.wikipedia.org/w/api.php?action=opensearch&search=&quot;Foo+Bar&quot; Foo Bar] http://test.wikipedia.org/w/api.php?action=opensearch&search=&quot;Foo+Bar&quot; ``` Produce: ``` <a href="http://test.wikipedia.org/w/api.php?action=opensearch&amp;search=%5C%22Foo+Bar%5C%22">Foo Bar</a> <a href="http://test.wikipedia.org/w/api.php?action=opensearch&amp;search=%5C%22Foo+Bar&amp;quot">http://test.wikipedia.org/w/api.php?action=opensearch&amp;search=%5C%22Foo+Bar&amp;quot</a> ```

Now quotes stop external links: ``` [http://test.wikipedia.org/w/api.php?action=opensearch&search="Foo+Bar" Foo Bar] http://test.wikipedia.org/w/api.php?action=opensearch&search="Foo+Bar" ``` Produce: ``` <a href="http://test.wikipedia.org/w/api.php?action=opensearch&search=">"Foo+Bar" Foo Bar</a> <a href="http://test.wikipedia.org/w/api.php?action=opensearch&search=">http://test.wikipedia.org/w/api.php?action=opensearch&search=</a>"Foo+Bar" ``` If you try to escape them with `&quot;` you don't get `"` or `&quot;` at the url, but `\"` (urlescaped) If you try to escape them with &quot; you don't get " or &quot; at the url, but \" (urlescaped) ``` [http://test.wikipedia.org/w/api.php?action=opensearch&search=&quot;Foo+Bar&quot; Foo Bar] http://test.wikipedia.org/w/api.php?action=opensearch&search=&quot;Foo+Bar&quot; ``` Produce: ``` <a href="http://test.wikipedia.org/w/api.php?action=opensearch&amp;search=%5C%22Foo+Bar%5C%22">Foo Bar</a> <a href="http://test.wikipedia.org/w/api.php?action=opensearch&amp;search=%5C%22Foo+Bar&amp;quot">http://test.wikipedia.org/w/api.php?action=opensearch&amp;search=%5C%22Foo+Bar&amp;quot</a> -------------------------- **Version**: 1.24rc``` **Severity**: normal