https://bugzilla.wikimedia.org/show_bug.cgi?id=30589

       Web browser: ---
             Bug #: 30589
           Summary: URLGetParameters: non-alphanumeric data coming from
                    URL gets badly mangled
           Product: MediaWiki extensions
           Version: any
          Platform: All
               URL: http://www.mediawiki.org/wiki/Extension:UrlGetParamete
                    rs
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: Unprioritized
         Component: [other]
        AssignedTo: wikibugs-l@lists.wikimedia.org
        ReportedBy: gerv-wikime...@gerv.net
                CC: sh.ya...@gmail.com, yaro...@gmail.com
    Classification: Unclassified


http://www.mediawiki.org/wiki/Extension:UrlGetParameters

When getting data from the URL, this extension calls rawurlencode() on the data
before writing it to the page. This makes it safe - scary things like < and >
don't get through. But it mangles stuff! If something is URL encoded, it needs
to be URL decoded and then HTML encoded.

Consequently, it should be doing the equivalent of htmlencode(urldecode($foo)).

Last checkin was by "yaron", so CCing both people of that name in this Bugzilla
:-) (Sorry if you are the wrong yaron...)

The other people mentioned on the extension's page are "S.O.E. Ansems" and
Ankit Garg", but I can't find either of them in this Bugzilla.

Gerv

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to