https://bugzilla.wikimedia.org/show_bug.cgi?id=15564

--- Comment #3 from Brion Vibber <br...@wikimedia.org> 2011-09-23 00:02:05 UTC 
---
(In reply to comment #1)
> should works with #tag:

Actually that doesn't seem to do any different.

Hmm...

The parameter with the search term on the searchmenu-new message in
Special:Search is escaped ahead of time so that it won't trigger wiki syntax in
the output: eg a title containing "''" shouldn't trigger italics.

So the inputbox's parameters contain "default=foo&amp;bar" (or on 1.18/trunk,
"default=foo&#38;bar" which fails in a similar but slightly different way).

Inputbox dutifully accepts that and sticks it in the value of its (hidden)
input element -- of course escaping all of its output so the & and whatnot are
preserved across the form submission.

Possibly inputbox should do normalization on the input to pre-convert any
character references... though of course if anybody is *deliberately* putting
character references into the inputbox input values they'd need to update to
double-escape.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to