From c35018efd1686f0be3c6748566edfe83998bf7f9 Mon Sep 17 00:00:00 2001 From: Brion Vibber Date: Mon, 11 Jul 2011 23:51:21 +0000 Subject: [PATCH] followup r91869: validate id chars for incoming prefs tabs in hash ([\w-]+ is sufficient for our needs here) --- resources/mediawiki.special/mediawiki.special.preferences.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/resources/mediawiki.special/mediawiki.special.preferences.js b/resources/mediawiki.special/mediawiki.special.preferences.js index 98ae25325e..2d2713844e 100644 --- a/resources/mediawiki.special/mediawiki.special.preferences.js +++ b/resources/mediawiki.special/mediawiki.special.preferences.js @@ -42,7 +42,7 @@ $( '#preferences' ) // On document ready: $( function() { var hash = window.location.hash; - if( hash.match( /^#preftab-/ ) ) { + if( hash.match( /^#preftab-[\w-]+/ ) ) { var $tab = $( hash + '-tab' ); $tab.click(); } -- 2.20.1