From 35f745de45ad3e0b24a4a3469c0951d04307f4b8 Mon Sep 17 00:00:00 2001 From: Brion Vibber Date: Mon, 27 Feb 2012 21:52:33 +0000 Subject: [PATCH] Revert r110045: well-meaning but broken attempt to apply preemptive XSS protection on messages This caused bug 34708: broke usage examples in WikiEditor which include or tags as-is, which is perfectly legit HTML. --- includes/MessageBlobStore.php | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/includes/MessageBlobStore.php b/includes/MessageBlobStore.php index f3fc4d3366..be6b27c9ef 100644 --- a/includes/MessageBlobStore.php +++ b/includes/MessageBlobStore.php @@ -350,12 +350,7 @@ class MessageBlobStore { $messages = array(); foreach ( $module->getMessages() as $key ) { - $messages[$key] = - Sanitizer::normalizeCharReferences( - Sanitizer::removeHTMLtags( - wfMsgExt( $key, array( 'language' => $lang ) ) - ) - ); + $messages[$key] = wfMsgExt( $key, array( 'language' => $lang ) ); } return FormatJson::encode( (object)$messages ); -- 2.20.1