Last modified: 2012-01-18 17:41:29 UTC
A HTTP request with the following query string: title=Special:FormEdit&Form=SomeForm&target=xxx%7B causes Fatal error: Call to a member function getPrefixedText() on a non-object in /var/www/ocw/mediawiki-1.17.1/extensions/SemanticForms/specials/SF_FormEdit.php on line 361 Not a big deal, because target page name is invalid, but it is kind of security issue -- code should control input to avoid crashes. It would be more better to show error page and say "`xxx{' is not a valid page title."
The issue here was actually because you had "Form=" in the query string instead of "form=", but in any case, it was a bug. It's fixed now in SVN.