Change Details

The #checkuser-userinfocard feature is vulnerable to message key XSS through several messages == Problem messages | Message name(s) | Override using stored XSS | Resulting alert showing that JavaScript was run | | -- | -- | -- | | All `group-*` messages | {F65931550} | {F65931558} | | `checkuser-userinfocard-groups` | {F65931564} | {F65931566} | | All global group messages | {F65931585} | {F65931583} | | `checkuser-userinfocard-global-groups` | {F65931579} | {F65931575} | == Acceptance criteria * [ ] #checkuser-userinfocard is no longer vulnerable to message key stored XSS

The #checkuser-userinfocard feature is vulnerable to message key XSS through several messages == Problem messages | Message name(s) | Override using stored XSS | Resulting alert showing that JavaScript was run | | -- | -- | -- | | All `group-*` messages | {F65931550} | {F65931558} | | `checkuser-userinfocard-groups` | {F65931564} | {F65931566} | | All global group messages | {F65931585} | {F65931583} | | `checkuser-userinfocard-global-groups` | {F65931579} | {F65931575} | == Acceptance criteria * [x] #checkuser-userinfocard is no longer vulnerable to message key stored XSS

The #checkuser-userinfocard feature is vulnerable to message key XSS through several messages == Problem messages | Message name(s) | Override using stored XSS | Resulting alert showing that JavaScript was run | | -- | -- | -- | | All `group-*` messages | {F65931550} | {F65931558} | | `checkuser-userinfocard-groups` | {F65931564} | {F65931566} | | All global group messages | {F65931585} | {F65931583} | | `checkuser-userinfocard-global-groups` | {F65931579} | {F65931575} | == Acceptance criteria * [ * [x] #checkuser-userinfocard is no longer vulnerable to message key stored XSS