Merge "Do not allow raw HTML in talk page overlay header"

This commit is contained in:
jenkins-bot 2020-02-18 23:48:37 +00:00 committed by Gerrit Code Review
commit 30fac0ca85

View file

@ -62,7 +62,8 @@ module.exports = function ( mobile ) {
return createOverlay( 'TalkSectionOverlay', {
id: sectionId,
section: new mobile.Section( {
line: $headline.html(),
// Strip out any HTML from the headline to avoid links in T243650.
line: $( '<span>' ).text( $( $headline ).text() )[ 0 ].outerHTML,
text: $heading.next().html()
} ),
// FIXME: Replace this api param with onSaveComplete