Blacklist % in HTML id's
authorAryeh Gregor <simetrical@users.mediawiki.org>
Wed, 25 Aug 2010 17:56:03 +0000 (17:56 +0000)
committerAryeh Gregor <simetrical@users.mediawiki.org>
Wed, 25 Aug 2010 17:56:03 +0000 (17:56 +0000)
commit839491a18c687f4619e8b243c359e0b8c5e1fdc7
tree1aa33389af0bb99a715bd9081d412f37c202060a
parentb1ec616665f52c190c40b077d9ba383aad1f89cb
Blacklist % in HTML id's

As pointed out by entlinkt at bug 24918, this could cause problems --
browsers don't interpret percent escapes in fragments consistently, so
any percent sign that might be part of an escape could be a problem.
For simplicity, just strip all of them.
includes/Sanitizer.php