https://bugzilla.wikimedia.org/show_bug.cgi?id=48567

--- Comment #3 from Daniel Kinzler <daniel.kinz...@wikimedia.de> ---
The issue seems to be that wfTemplate which uses the Template class that
derives from Message, which will expand {{xxx}} in parameters per default. 
Parameters must either be sanitized/escaped before being passed in, or they
need to be passed as raw parameters (in which case we have to be sore they
don't contain evil html).

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to