dépôts / lhc / web / wiklou.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9661f21) | patch
Tighten up unquoted attribute output
authorAryeh Gregor <simetrical@users.mediawiki.org>
Fri, 18 Sep 2009 15:28:46 +0000 (15:28 +0000)
committerAryeh Gregor <simetrical@users.mediawiki.org>
Fri, 18 Sep 2009 15:28:46 +0000 (15:28 +0000)
commit5c1205314ceb94050303f6dfbfafb9d462505a5a
tree8c9f11272859be2558aa91f176a3542d9204caadtree | snapshot
parent9661f21b821b41feef22ca598fbf915248d088a9commit | diff
Tighten up unquoted attribute output

Only affects wikis with $wgWellFormedXml = false.  In principle, the old
behavior might have permitted XSS in IE if that setting is false (which
is not the default), but I haven't checked.  See
<http://code.google.com/p/html5lib/issues/detail?id=92>.
includes/Html.php diff | blob | history
Wiklou, le Wiki du Wiklou