On Fri, Dec 9, 2011 at 10:34 AM, Marlen Caemmerer <[email protected]>wrote:

>
> On Fri, 9 Dec 2011, Brion Vibber wrote:
> >>
> >> Your system has a combination of PHP and libxml2 versions which is buggy
> >> and can cause hidden data corruption in MediaWiki and other web apps.
> >> Upgrade to PHP 5.2.9 or later and libxml2 2.7.3 or later!
> >> ABORTING (see http://bugs.php.net/bug.php?id=45996).
> >>
>
> Funny,
> the result is:
>
> <pre>
> Got: bc/b
> Expected: &lt;b&gt;c&lt;/b&gt;
> </pre>
>

Running on command-line that looks like you are indeed seeing the bug in
its original form. (I forgot the / comes through too.) The
htmlspecialchars() there escapes the < and > for HTML output, so that's why
they come through as &lt; and &gt;

-- brion
_______________________________________________
MediaWiki-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Reply via email to