Re: [Wikitech-l] Towards arbitrary client-side JavaScript execution

31 Mar 2006

      Nick Jenkins wrote:
...

Why does MediaWiki ever allow unescaped ">" characters? This

behaviour seem to increase the chances of a JavaScript security
problem.
It doesn't, modulo uncaught bugs.
-- brion vibber (brion @ pobox.com)