Merge "Block reason messages escape HTML"

2018-03-29 21:34:34 +00:00 · 2018-03-29 21:34:34 +00:00 · 121958bea1
parent d925a800ef 6bea4324c6
commit 121958bea1
1 changed files with 2 additions and 1 deletions
--- a/resources/skins.minerva.editor/init.js
+++ b/resources/skins.minerva.editor/init.js
@ -298,7 +298,8 @@
 					popup.show(
 						mw.msg(
 							'mobile-frontend-editor-blocked-info-loggedin',
-							blockInfo.blockReason,
+							// Strip any html in the blockReason.
+							$( '<div />' ).html( blockInfo.blockReason ).text(),
 							blockInfo.blockedBy
 						),
 						{