mirror of
https://gerrit.wikimedia.org/r/mediawiki/extensions/RSS
synced 2024-11-13 17:57:07 +00:00
6e2ce16be0
The SecurityCheck-XSS violation occurred because, in renderFeed(), the $renderedFeed variable contains both wikitext (tainted) and HTML (safe) at different points in the function, and Phan is unable to disentangle that. Splitting it into two variables allows Phan to validate the rest of the code just fine. Change-Id: I4da446b869349f06fc0fc40816d44cee390c49a6 |
||
---|---|---|
.. | ||
Hooks.php | ||
RSSData.php | ||
RSSParser.php | ||
Utils.php |