Good Morning MediaWiki Fans:
While working on an upgrade to 1.13.0 source, I noticed this small anomaly in the system. At line 1399 of includes/EditPage.php there is the output statement:
$wgOut->addHTML( "\n<input type='hidden' value="$token" name="wpEditToken" />\n" );
If you take a look at this hidden value line in the resulting page text, you will note it looks something like this:
<input type='hidden' value="+\" name="wpEditToken" />
Note the extra back-slash in the value="+" string. Something is fishy there, it shouldn't be there.
This behavior is in the MediaWiki 1.14alpha version I see today at http://www.mediawiki.org/wiki/Special:Version
For example: $ wget 'http://www.mediawiki.org/w/index.php?title=Test_edit&action=edit' \ -O editTest.html $ grep wpEditToken editTest.html <input type='hidden' value="+\" name="wpEditToken" />
This little bug caused problems in out down-stream processing which was trying to parse this FORM INPUT variable.
--Hiram