63366f7d3b
A bug in decoding of certain encoded links could allow injection of raw HTML into page output; this could potentially lead to XSS attacks. More info: http://mail.wikipedia.org/pipermail/mediawiki-announce/2006-March/000040.html ok kevlo@