Merge "De-obfuscate attempts to trick people into editing .js pages"

This commit is contained in:
jenkins-bot 2022-02-05 23:41:28 +00:00 committed by Gerrit Code Review
commit d19b359312

View file

@ -684,6 +684,12 @@ class InputBox {
if ( !$this->isValidColor( $this->mBGColor ) ) {
$this->mBGColor = 'transparent';
}
// T297725: De-obfuscate attempts to trick people into making edits to .js pages
$target = $this->mType === 'commenttitle' ? $this->mPage : $this->mDefaultText;
if ( $this->mHidden && $this->mPreload && substr( $target, -3 ) === '.js' ) {
$this->mHidden = false;
}
}
/**