Page MenuHomePhabricator

CSS hijack by inline style
Closed, InvalidPublic

Description

Author: jimmy

Description:
Whole page is white in wikipedia.

This line below will override page to white, and every user can do that easily.

<div style="width: 200%; height: 200%; top: -50%;left: -50%; position:absolute;background-color: #FFFFFF; z-index: 255;"></div>

This may duplicate with #35704 , but still leave this issue for track.


Version: unspecified
Severity: minor
Whiteboard: aklapper-moreinfo

Attached:

css-hijack-result.png (690×975 px, 12 KB)

Details

Reference
bz63404

Event Timeline

bzimport raised the priority of this task from to Needs Triage.Nov 22 2014, 3:06 AM
bzimport set Reference to bz63404.
bzimport added a subscriber: Unknown Object (MLST).

jimmy wrote:

Correct div attached below:

<div style="width: 200%; height: 200%; top: -50%;left: -50%; position:absolute;background-color: #FFFFFF; z-index: 255;"></div>

Thanks for taking the time to report this!

Why do you think there is a bug in the MediaWiki software?

I see no bug here. It looks like someone just vandalized that page.

Closing this ticket as per comment 3.