title: 'mw.message.parse() accepts javascript: protocol in wikilinks'
link: https://phabricator.wikimedia.org/T86738
reference: composer://mediawiki/core
cve: CVE-2020-25814
branches:
1.31.x:
time: 2020-09-24 01:25:00
versions: ['>=1.31.0', '<1.31.9']
1.34.x:
time: 2020-09-24 01:38:27
versions: ['>=1.34.0', '<1.34.3']
1.35.x:
time: 2020-09-24 17:14:47
versions: ['>=1.34.99', '<1.35.0']
|