* Additional protections against HTML breakage in table parsing
authorBrion Vibber <brion@users.mediawiki.org>
Mon, 3 Apr 2006 08:36:17 +0000 (08:36 +0000)
committerBrion Vibber <brion@users.mediawiki.org>
Mon, 3 Apr 2006 08:36:17 +0000 (08:36 +0000)
commita5d6a7db891968c7b94d056d0829bdb6e72809db
tree815d8449fd28807fa396e12a0c29b513ef5c5013
parent5f3fa4c01f86690b86d9d222e50ae158e25f01ef
* Additional protections against HTML breakage in table parsing
Avoid splitting table cells on "||" appearing in HTML tag attributes.
Bad tag nesting is still possible, but this should keep things from
being split unexpectedly in the middle of an element, and might
avoid some potential injection points.
See http://mail.wikipedia.org/pipermail/wikitech-l/2006-April/034637.html
RELEASE-NOTES
includes/GlobalFunctions.php
includes/Parser.php
maintenance/parserTests.txt