Thijs/wiki.techinc.nl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
Current configuration on the wiki
129224 commits 1 branch 0 tags 744 MiB
PHP 82.2%
JavaScript 15.7%
Less 1.1%
CSS 0.7%
Vue 0.1%
Find a file
SomeRandomDeveloper 0699f46299 Revert "SECURITY: Escape rawElement $content" 
This reverts commit 596c2615de.

Reason for revert: This has already been fixed in
I7fe42df7b9a3fd97eaf89515b7c1afb5ae3e688c. This second patch does not
address the issue properly and causes strings to be double escaped that
should only be escaped once.

Full reasoning:
* The parameter is now marked as `@param-taint $buttonLabel exec_html`
  since the fix for T402313
* All callers outside of HTMLButtonField escape the label now
* There is another method call in HTMLButtonField, which passes the
  `buttonLabel` property to the function. This property is assigned
  in the following places:
** L63: Parsed message
** L67: String literal with a unicode character
** L69: Escaped string
** L72: Intentionally raw HTML string
** L126: `$this->getDefault()`, which will be escaped again in that line
   after this patch is reverted


Bug: T394396
Change-Id: Ifc982e93c3cf2b6658cb8943eb717cb7a2aea7f5
2025-10-03 22:08:24 +00:00
.phan structure tests: allow PHP 8.1 syntax and autoload enums 2025-06-18 10:55:15 +01:00
cache In .htaccess deny files, use "Satisfy All" 2025-04-04 13:17:15 +00:00
docs config: Change Reauthenticate Time Default 2025-08-20 21:56:57 +00:00
extensions Update git submodules 2025-10-03 15:45:41 +00:00
images
includes Revert "SECURITY: Escape rawElement $content" 2025-10-03 22:08:24 +00:00
languages COPYING: Do not reference old FSF postal address 2025-10-02 09:32:10 +00:00
maintenance Regenerate patch-drop-page_restrictions-pr_user.sql for SQLite 2025-09-29 22:19:19 +00:00
mw-config installer: Fix class name in example override 2025-01-25 15:07:10 +00:00
resources SECURITY: Escape system messages in mw.language.listToText 2025-10-03 14:33:06 +00:00
skins Update git submodules 2025-10-02 20:25:49 +00:00
tests SECURITY: Sanitize data- attributes 2025-10-02 19:21:42 +00:00
vendor@d9b7761127 Update git submodules 2025-09-29 16:26:13 +00:00
.dockerignore
.editorconfig
.eslintignore SimpleParsoidOutputStash: add serialization test cases 2025-09-09 14:26:59 +00:00
.eslintrc.json
.fresnel.yml
.git-blame-ignore-revs
.gitattributes
.gitignore Branch commit for REL1_43 2024-10-22 12:47:33 -04:00
.gitmessage
.gitmodules Branch commit for REL1_43 2024-10-22 12:47:33 -04:00
.gitreview
.mailmap
.phpcs.xml
.stylelintrc.json
.svgo.config.js
.vsls.json
api.php
autoload.php Make Content JsonCodecable 2025-09-05 16:12:09 -04:00
CODE_OF_CONDUCT.md
composer.json Upgrading wikimedia/parsoid (v0.20.3 => v0.20.4) 2025-09-29 16:47:11 +00:00
composer.local.json-sample
COPYING COPYING: Do not reference old FSF postal address 2025-10-02 09:32:10 +00:00
CREDITS
DEVELOPERS.md
docker-compose.yml dev(docker): Bump mediawiki-web container to dev/bookworm-apache2:1.0.1 2025-01-07 17:02:36 +00:00
FAQ
Gruntfile.js
HISTORY
img_auth.php
index.php
INSTALL INSTALL: Document requirement for bcmath/gmp on 32-bit systems 2025-04-18 15:57:48 +00:00
jsdoc.json
load.php
opensearch_desc.php
package-lock.json build: Updating npm dependencies 2025-01-06 08:38:45 -05:00
package.json Merge "Update Codex from v1.13.1 to v1.14.0" 2024-10-16 17:26:41 +00:00
phpunit.xml.dist
README.md
RELEASE-NOTES-1.43 Start 1.43.6 2025-10-03 17:54:59 +01:00
rest.php
SECURITY
thumb.php
thumb_handler.php
UPGRADE

README.md

MediaWiki

MediaWiki is a free and open-source wiki software package written in PHP. It serves as the platform for Wikipedia and the other Wikimedia projects, used by hundreds of millions of people each month. MediaWiki is localised in over 350 languages and its reliability and robust feature set have earned it a large and vibrant community of third-party users and developers.

MediaWiki is:

  • feature-rich and extensible, both on-wiki and with hundreds of extensions;
  • scalable and suitable for both small and large sites;
  • simple to install, working on most hardware/software combinations; and
  • available in your language.

For system requirements, installation, and upgrade details, see the files RELEASE-NOTES, INSTALL, and UPGRADE.

MediaWiki is the result of global collaboration and cooperation. The CREDITS file lists technical contributors to the project. The COPYING file explains MediaWiki's copyright and license (GNU General Public License, version 2 or later). Many thanks to the Wikimedia community for testing and suggestions.