Commit graph

519 commits

Author SHA1 Message Date
Brian Wolff d8d1e067bd SECURITY: Prevent XSS from "stripItem" replacement strings in attribute
Previously when $wgRSSAllowLinkTag was true, you could put an
<a> tag containing unescaped ", inside another attribute to escape
from the attribute and create an XSS.

This makes the marker include " and ', so if they are put anywhere
where quotes aren't allowed, the marker will get mangled and not
replaced

Bug: T307028
Change-Id: I2f7827103bdee0ea766b1f5e7040e2a022fcd2f3
2022-04-29 12:08:58 -07:00
gerritbot 0d6929b901 Replace Http::isValidURI with MWHttpRequest::isValidURI
Bug: T305813
Change-Id: I76d143117be4608588f41700f384205d7bbf2052
2022-04-10 23:00:26 +00:00
Translation updater bot 1422cd3def Localisation updates from https://translatewiki.net.
Change-Id: Id0ef4a34132c6310a3681acfe66841b0feade364
2022-04-04 09:35:03 +02:00
Translation updater bot f7e17b245a Localisation updates from https://translatewiki.net.
Change-Id: I75259fe5019559be75efc3663f9a678e3ab6d69d
2022-03-28 08:21:48 +02:00
Translation updater bot dbfdeaf412 Localisation updates from https://translatewiki.net.
Change-Id: I9060e6d8b609ddd7a4ae3e24c1abf50e161fed3d
2022-03-21 08:15:18 +01:00
C. Scott Ananian fe2388f191 Replace deprecated Sanitizer::removeHTMLtags() with safer ::removeSomeTags()
The minimum required MW version has been bumped to 1.38.

Depends-On: Ic864c01471c292f11799c4fbdac4d7d30b8bc50f
Change-Id: I83923d8b38d33f3638cd53958dd10f257ec21f7c
2022-03-04 14:26:41 -05:00
Reedy 32ec2ae33b Replace usages of Wikimedia\(suppress|restore)Warnings()
Change-Id: I5ef62930f0d4f9522de16b6271f084bc7cc77efe
2022-02-24 21:17:28 +00:00
Translation updater bot 7794f9e6a5 Localisation updates from https://translatewiki.net.
Change-Id: I9d030ca4e476f69c24280f079db3f73b91542181
2022-02-22 08:12:07 +01:00
Alexander Vorwerk 01db40bcc1 Avoid using WikiPage::factory()
WikiPage::factory() is deprecated since 1.36 and should be replaced
with WikiPageFactory::newFromTitle().

Bug: T297688
Change-Id: I20898d956230627d820986a683c20bb487d1083b
2022-02-12 00:43:38 +00:00
Umherirrender 5d653445cf Remove type hint for removed class PhpHttpRequest/CurlHttpRequest
Follow-Up: I978b75827e69db02cbc027fe0b89a028adfc6820
Change-Id: I66244ad1f2751c33a47948c530e6ff9c576b6345
2022-02-12 01:20:00 +01:00
Translation updater bot 26353d0c92 Localisation updates from https://translatewiki.net.
Change-Id: Ia37f5a43fea472d3f4a2ac201eb4004a61c9b5e1
2022-01-17 08:12:50 +01:00
Translation updater bot 37ce6abba7 Localisation updates from https://translatewiki.net.
Change-Id: I922550ec6aaa3ec8ee315261e26553b92cd6d441
2021-11-03 08:21:08 +01:00
libraryupgrader 0805049f02 build: Updating mediawiki/mediawiki-codesniffer to 38.0.0
Change-Id: Ie4fc9a6db79bf01583357f4aaa34b6e6da0bb90f
2021-10-24 11:43:02 +00:00
Translation updater bot 2a416ed5e1 Localisation updates from https://translatewiki.net.
Change-Id: I1727eb1eb579584866cb0f6e5d64d6440d3b4169
2021-10-18 15:21:06 +02:00
libraryupgrader f57d3ebb3b build: Updating ansi-regex to 5.0.1
* https://npmjs.com/advisories/5197 (CVE-2021-3807)

Additional changes:
* composer.json: Updated phpcs command in composer test (T280592).
* composer.json: Added phpcs command to scripts (T280592).

Change-Id: Ib05ce1ada11ce3fbaf340758a88afed7b5696f7a
2021-10-05 07:21:40 +00:00
Translation updater bot a7dceaf2d6 Localisation updates from https://translatewiki.net.
Change-Id: Ifc1bd3c3e27d5ad4c54f7014701f45b7a18e6c54
2021-09-17 08:45:43 +02:00
Translation updater bot 67e5b8cbd6 Localisation updates from https://translatewiki.net.
Change-Id: I1cab4ba502ac08bd33e391fc7b75d943d29505e9
2021-09-13 08:30:10 +02:00
libraryupgrader 7039afa64f build: Updating composer dependencies
* mediawiki/mediawiki-phan-config: 0.10.6 → 0.11.0
* php-parallel-lint/php-parallel-lint: 1.3.0 → 1.3.1

Change-Id: I0e1ca4a925edb65d07aa40c9b89b062f5ead2754
2021-09-09 11:25:16 +00:00
Translation updater bot dc3ee0032d Localisation updates from https://translatewiki.net.
Change-Id: I490d69d9b01221ceb9461328d67e22e8a9ca672f
2021-09-02 08:26:41 +02:00
libraryupgrader 37448ac105 build: Updating path-parse to 1.0.7
* https://npmjs.com/advisories/1773 (CVE-2021-23343)

Change-Id: I6020c74f198580c56adcae71dbce1d825422e5d1
2021-08-12 09:45:58 +00:00
Translation updater bot ce90d81295 Localisation updates from https://translatewiki.net.
Change-Id: Idfc89bfcb63517043dd0357f7a0f496ab41e5b11
2021-08-02 08:37:29 +02:00
libraryupgrader 7e224191d7 build: Updating mediawiki/mediawiki-codesniffer to 37.0.0
Change-Id: I9607f0551e12fd01d75299de5f3c4983107f4e1a
2021-07-23 19:57:34 +00:00
Translation updater bot f3b0318161 Localisation updates from https://translatewiki.net.
Change-Id: I15d5af1212f045063e317bd70b075d66faf958b7
2021-05-28 09:06:22 +02:00
libraryupgrader 362583bff3 build: Updating browserslist to 4.16.6
* https://npmjs.com/advisories/1747 (CVE-2021-23364)

Change-Id: Iaefca111d9fa65fcd257345d49d7d2ac511e9458
2021-05-26 02:33:58 +00:00
Translation updater bot 0f9699f24f Localisation updates from https://translatewiki.net.
Change-Id: If08a63dce846830bafb8a92e9d35b52779fa71f0
2021-05-24 09:55:12 +02:00
libraryupgrader b3f3afee2b build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 35.0.0 → 36.0.0
* php-parallel-lint/php-parallel-lint: 1.2.0 → 1.3.0

npm:
* grunt: 1.3.0 → 1.4.0
* lodash: 4.17.19 → 4.17.21
  * https://npmjs.com/advisories/1673 (CVE-2021-23337)

Change-Id: Ie2a7289801cab5f79f967abaf0c09c3f9f691de3
2021-05-13 03:17:45 +00:00
Translation updater bot 6691729c2a Localisation updates from https://translatewiki.net.
Change-Id: Ia1c4cd6bfa58dcc36252e886beb6f7e3c6bef732
2021-05-07 08:43:10 +02:00
Translation updater bot 4b89bd4b80 Localisation updates from https://translatewiki.net.
Change-Id: I24a65ce59d2eaabbcc9d02ee0e24627f941e40de
2021-05-05 08:38:58 +02:00
Translation updater bot 13a52c827b Localisation updates from https://translatewiki.net.
Change-Id: I5e18ccd7d13c5bebff57a252e67155ecc29bb73c
2021-05-03 08:37:46 +02:00
jenkins-bot 404b7e699c Merge "Localisation updates from https://translatewiki.net." 2021-04-26 07:16:17 +00:00
Translation updater bot c88bbd916d Localisation updates from https://translatewiki.net.
Change-Id: Ie7826cfa47eeb8cffb53a459c4cf55c8264b0b73
2021-04-26 09:10:45 +02:00
Translation updater bot 1b2dde4d9c Localisation updates from https://translatewiki.net.
Change-Id: I7b09d98b7f66ca83a85c646349baad4a97c20e77
2021-04-26 08:57:32 +02:00
Translation updater bot 9d86e5dc6b Localisation updates from https://translatewiki.net.
Change-Id: I67c8e47e18e166c350d6c24879fb2c14140de539
2021-04-22 09:32:06 +02:00
Translation updater bot 54d598e1b1 Localisation updates from https://translatewiki.net.
Change-Id: I95549565cf58808c117bc8d24bf08556c235ce67
2021-04-20 08:48:08 +02:00
Translation updater bot d95c9090a5 Localisation updates from https://translatewiki.net.
Change-Id: I540adad739a71eabd8ce84d6ce16674efbbfdf85
2021-04-19 08:51:21 +02:00
Reedy d263553643 Rename messages that use 'whitelist'
Bug: T277959
Change-Id: I06d4e8a3eb139d2ba88fb98680db3e6987d535da
2021-04-19 02:03:58 +01:00
libraryupgrader f03f3907ff build: Updating eslint-config-wikimedia to 0.20.0
Change-Id: Ie12a984e7643c313ee1ff17a4cb4b52bdaefdcd1
2021-04-14 01:53:39 +00:00
Translation updater bot 60e6e584d9 Localisation updates from https://translatewiki.net.
Change-Id: I1a99822706937efe79cd0ec2c1e8cd24d3120a55
2021-03-22 08:37:43 +01:00
libraryupgrader ec6ff1baa0 build: Updating eslint-config-wikimedia to 0.19.0
Additional changes:
* eslint: Renamed `wikimedia/client` profile to `client-es5` (T277085).

Change-Id: Id5b21ebcd17fd2e1b073cdaca10ad028fb3b5701
2021-03-14 10:21:54 +00:00
libraryupgrader 058f41089c build: Updating eslint-config-wikimedia to 0.18.2
Change-Id: Iaa4556db7526d0c27eb71d7d2045dacbd1fb3231
2021-03-07 17:36:11 +00:00
Translation updater bot 6afe0bc72a Localisation updates from https://translatewiki.net.
Change-Id: I887eab6c0172ac46d84d701bc5a064ea9e20378c
2021-02-08 08:44:05 +01:00
libraryupgrader 27feef1f19 build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 34.0.0 → 35.0.0
* mediawiki/minus-x: 1.1.0 → 1.1.1

npm:
* eslint-config-wikimedia: 0.17.0 → 0.18.1

Additional changes:
* Added the "composer phan" command to conveniently run phan.
* Removing manual extensions for eslint.

Change-Id: I0d3c07ec377f258cfc5eb375e602751765d7e5c2
2021-01-30 08:56:28 +00:00
Translation updater bot 34c8a06b17 Localisation updates from https://translatewiki.net.
Change-Id: I6d1f1e5c8ce90fc976241653712723b02b94d5d5
2021-01-04 08:44:28 +01:00
Translation updater bot 61abc2a230 Localisation updates from https://translatewiki.net.
Change-Id: I376e3ee5de4747eff27c1f8ab2ced4657202181c
2020-12-29 09:48:33 +01:00
Reedy 8adb5e68ca Wrap libxml_disable_entity_loader() calls in version constraint
Bug: T268847
Change-Id: I0b0dc4a334c7e30fd7af7a4b2d2ff45e609e7e0e
2020-12-27 16:37:05 +00:00
libraryupgrader 1c8e91f11a build: Updating mediawiki/mediawiki-phan-config to 0.10.6
Change-Id: Ib4dedc16264c9f218ea10632832107709df38f29
2020-12-20 01:12:39 +00:00
libraryupgrader 3493bfd42b build: Updating dependencies
composer:
* mediawiki/mediawiki-phan-config: 0.10.4 → 0.10.5

npm:
* ini: 1.3.5 → 1.3.7
  * https://npmjs.com/advisories/1589

Change-Id: I81ecddfab989b363b74279d71e5bce0f6efc53f7
2020-12-11 05:30:32 +00:00
Translation updater bot 693924386b Localisation updates from https://translatewiki.net.
Change-Id: I1c272fffd214900603f6768dd7905f2fd37f9773
2020-12-07 08:46:54 +01:00
libraryupgrader cae77b5087 build: Updating mediawiki/mediawiki-codesniffer to 34.0.0
Change-Id: I7f296e93a7a685c9ec3b9e9eea4460416f8c89c4
2020-12-06 23:42:03 +00:00
libraryupgrader a6af4d7772 build: Updating mediawiki/mediawiki-phan-config to 0.10.4
Change-Id: I16514a7488f6013794d8c1ff49679530af53258b
2020-11-20 14:26:48 +00:00