http://pear.php.net/bugs/search.php?cmd=display&package_name%5B0%5D=Text_Wiki_Mediawiki Search Results en-us pear-webmaster@lists.php.net pear-webmaster@lists.php.net hourly 1 2000-01-01T12:00+00:00 http://pear.php.net/gifs/pearsmall.gif http://pear.php.net/bugs http://pear.php.net/bugs/18092 Text_Wiki_Mediawiki Bug Reported by jonnybradley 2010-12-02T01:32:03+00:00 PHP: 5.3.2 OS: any Package Version: Description: ------------ mediawiki parser stops parsing when it gets to a link with single quotes in (using this in Tiki v6.x SVN). Presumably this is failing in pear/Text/Wiki/Parse/Mediawiki/Url.php Test script: --------------- example source from wikipedia: "Florida High Speed Rail" [http://www2.tbo.com ''The Tampa Tribune'' (TBO.com).] Expected result: ---------------- [http://www2.tbo.com|''The Tampa Tribune'' (TBO.com).] Actual result: -------------- [http://www2.tbo.com|]]> Text_Wiki_Mediawiki Bug Reported by jonnybradley 2010-12-02T01:32:03+00:00 PHP: 5.3.2 OS: any Package Version: Description: ------------ mediawiki parser stops parsing when it gets to a link with single quotes in (using this in Tiki v6.x SVN). Presumably this is failing in pear/Text/Wiki/Parse/Mediawiki/Url.php Test script: --------------- example source from wikipedia: "Florida High Speed Rail" [http://www2.tbo.com ''The Tampa Tribune'' (TBO.com).] Expected result: ---------------- [http://www2.tbo.com|''The Tampa Tribune'' (TBO.com).] Actual result: -------------- [http://www2.tbo.com|]]> 2014-06-05T09:00:49+00:00 jonny &#x61;&#116; tiki &#x64;&#111;&#x74; org Text_Wiki_Mediawiki Bug http://pear.php.net/bugs/17393 Text_Wiki_Mediawiki Bug Reported by ken 2010-05-13T11:41:47+00:00 PHP: 5.3.2 OS: Ubuntu Package Version: 0.2.0 Description: ------------ text_wiki_mediawiki Unrecognized tag *; or *: Test script: --------------- * item first * item second *: definition text * item third *; definition term : definition text * item last Expected result: ---------------- <ul> <li> item first</li> <li> item second <dl> <dd> definition text</dd> </dl> </li> <li> item third <dl> <dt> definition term </dt> <dd> definition text</dd> </dl> </li> <li> item last</li> </ul> Actual result: -------------- <ul> <li> item first</li> <li> item second</li> <li>: definition text</li> <li> item third</li> <li>; definition term : definition text</li> <li> item last</li> </ul>]]> Text_Wiki_Mediawiki Bug Reported by ken 2010-05-13T11:41:47+00:00 PHP: 5.3.2 OS: Ubuntu Package Version: 0.2.0 Description: ------------ text_wiki_mediawiki Unrecognized tag *; or *: Test script: --------------- * item first * item second *: definition text * item third *; definition term : definition text * item last Expected result: ---------------- <ul> <li> item first</li> <li> item second <dl> <dd> definition text</dd> </dl> </li> <li> item third <dl> <dt> definition term </dt> <dd> definition text</dd> </dl> </li> <li> item last</li> </ul> Actual result: -------------- <ul> <li> item first</li> <li> item second</li> <li>: definition text</li> <li> item third</li> <li>; definition term : definition text</li> <li> item last</li> </ul>]]> 2010-05-13T11:41:47+00:00 kenchou77 &#x61;&#116; gmail &#x64;&#111;&#x74; com Text_Wiki_Mediawiki Bug http://pear.php.net/bugs/16701 Text_Wiki_Mediawiki Bug Reported by jurik 2009-10-15T15:15:16+00:00 PHP: 5.2.5 OS: Linux Package Version: 0.2.0 Description: ------------ One can inject javascript code in table definitions. Our resolution: in Parse/Mediawiki/Table.php ----------------------- --- add code --- /** * Remove all bogus formatting * Allowed are key="value" pairs only * * @param string $format * @return string */ private function _cleanupFormat($format) { $validAttrs = array(); // regex pitch: (\w) = ["'] (.*) ["'] if (preg_match_all('/\s*(\w+)\s*=\s*(["\'])(.*)\\2/U', $format, $matches)) { for ($i = 0; $i < count($matches[0]); $i++) { $validAttrs[] = $matches[1][$i] . '="' . htmlspecialchars($matches[3][$i], ENT_QUOTES) . '"'; } } return implode(' ', $validAttrs); } ---------------------- --- around line 170 replace with --- if ($format = trim($matches[1])) { $param['format'] = $this->_cleanupFormat($format); } --- Test script: --------------- You can try to render this snippet: {| ><script>alert('gotcha!');</script |} Actual result: -------------- javascript gets executed]]> Text_Wiki_Mediawiki Bug Reported by jurik 2009-10-15T15:15:16+00:00 PHP: 5.2.5 OS: Linux Package Version: 0.2.0 Description: ------------ One can inject javascript code in table definitions. Our resolution: in Parse/Mediawiki/Table.php ----------------------- --- add code --- /** * Remove all bogus formatting * Allowed are key="value" pairs only * * @param string $format * @return string */ private function _cleanupFormat($format) { $validAttrs = array(); // regex pitch: (\w) = ["'] (.*) ["'] if (preg_match_all('/\s*(\w+)\s*=\s*(["\'])(.*)\\2/U', $format, $matches)) { for ($i = 0; $i < count($matches[0]); $i++) { $validAttrs[] = $matches[1][$i] . '="' . htmlspecialchars($matches[3][$i], ENT_QUOTES) . '"'; } } return implode(' ', $validAttrs); } ---------------------- --- around line 170 replace with --- if ($format = trim($matches[1])) { $param['format'] = $this->_cleanupFormat($format); } --- Test script: --------------- You can try to render this snippet: {| ><script>alert('gotcha!');</script |} Actual result: -------------- javascript gets executed]]> 2009-10-15T15:15:16+00:00 mail &#x61;&#116; jurikuehn &#x64;&#111;&#x74; de Text_Wiki_Mediawiki Bug http://pear.php.net/bugs/14652 Text_Wiki_Mediawiki Bug Reported by js290 2008-09-16T23:26:16+00:00 PHP: 4.3.11 OS: Linux Package Version: Description: ------------ Using <code><pre>, the \ character is not shown literally. It seems to treat it as a placeholder line continuation. So, the following markup: <code><pre> /------------------------------------------------------------------------------\ | Boot Options | \------------------------------------------------------------------------------/ </pre></code> displays as: /------------------------------------------------------------------------------| Boot Options | \------------------------------------------------------------------------------/ The \ disappears, and the line following the \ is joined with the previous line where the \ was. Test script: --------------- <code><pre> /------------------------------------------------------------------------------\ | Boot Options | \------------------------------------------------------------------------------/ </pre></code> Expected result: ---------------- /------------------------------------------------------------------------------\ | Boot Options | \------------------------------------------------------------------------------/ Actual result: -------------- /------------------------------------------------------------------------------| Boot Options | \------------------------------------------------------------------------------/]]> Text_Wiki_Mediawiki Bug Reported by js290 2008-09-16T23:26:16+00:00 PHP: 4.3.11 OS: Linux Package Version: Description: ------------ Using <code><pre>, the \ character is not shown literally. It seems to treat it as a placeholder line continuation. So, the following markup: <code><pre> /------------------------------------------------------------------------------\ | Boot Options | \------------------------------------------------------------------------------/ </pre></code> displays as: /------------------------------------------------------------------------------| Boot Options | \------------------------------------------------------------------------------/ The \ disappears, and the line following the \ is joined with the previous line where the \ was. Test script: --------------- <code><pre> /------------------------------------------------------------------------------\ | Boot Options | \------------------------------------------------------------------------------/ </pre></code> Expected result: ---------------- /------------------------------------------------------------------------------\ | Boot Options | \------------------------------------------------------------------------------/ Actual result: -------------- /------------------------------------------------------------------------------| Boot Options | \------------------------------------------------------------------------------/]]> 2014-06-05T09:00:07+00:00 sujiannming &#x61;&#116; gmail &#x64;&#111;&#x74; com Text_Wiki_Mediawiki Bug http://pear.php.net/bugs/8504 Text_Wiki_Mediawiki Feature/Change Request Reported by bjs5075@... 2006-08-18T14:26:45+00:00 PHP: 5.1.4 OS: Debian etch Package Version: CVS Description: ------------ I have created a MediaWiki-style citation parser/renderer this spans more than one PEAR package, and is quite specific to mediawiki, so I'm posting the notice here. There are four files involved, so I don't want to paste them in here. If you want the files, you can email me directly. I don't know if you will be able to easily integrate them, but I want to release the source now so that it can be worked on later. Test script: --------------- Citation format: text1<ref>reference text</ref> text2<ref name="this">that</ref> text3<ref name="this" /> text4<ref name="this"> etc. <references /> Expected result: ---------------- text1 [1] text2 [2] text3 [2] text4 [2] 1. ^ reference text 2. ^abc that Actual result: -------------- Currently no support]]> Text_Wiki_Mediawiki Feature/Change Request Reported by bjs5075@... 2006-08-18T14:26:45+00:00 PHP: 5.1.4 OS: Debian etch Package Version: CVS Description: ------------ I have created a MediaWiki-style citation parser/renderer this spans more than one PEAR package, and is quite specific to mediawiki, so I'm posting the notice here. There are four files involved, so I don't want to paste them in here. If you want the files, you can email me directly. I don't know if you will be able to easily integrate them, but I want to release the source now so that it can be worked on later. Test script: --------------- Citation format: text1<ref>reference text</ref> text2<ref name="this">that</ref> text3<ref name="this" /> text4<ref name="this"> etc. <references /> Expected result: ---------------- text1 [1] text2 [2] text3 [2] text4 [2] 1. ^ reference text 2. ^abc that Actual result: -------------- Currently no support]]> 2006-08-18T14:26:45+00:00 bjs5075 &#x61;&#116; rit &#x64;&#111;&#x74; edu Text_Wiki_Mediawiki Feature/Change Request