https://bugzilla.wikimedia.org/show_bug.cgi?id=48772
Web browser: --- Bug ID: 48772 Summary: Protect Parsoid-generated token-names, about-ids, typeofs from conflicts with user-provided names. Product: Parsoid Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: Unprioritized Component: JS/General Assignee: gwi...@wikimedia.org Reporter: ssas...@wikimedia.org CC: ssas...@wikimedia.org Classification: Unclassified Mobile Platform: --- User can enter html tags or provide tag attributes or attribute values that Parsoid (and downstream clients) treat specially. Ex: #mwt3 for about-ids, or mw:Object/* for typeofs or <template> tags or any of the special attributes/types found on http://www.mediawiki.org/wiki/Parsoid/MediaWiki_DOM_spec If Parsoid doesn't detect these and escape/handle them somehow, Parsoid will mislead clients like VisualEditor and/or incorrectly serialize them. -- You are receiving this mail because: You are on the CC list for the bug. _______________________________________________ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l