Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T11282, the corresponding Phabricator task for complete and up-to-date bug report information.

Bug 9282 - mwdumper GUI's DB connection doesn't escape input on JDBC URL

Summary:	mwdumper GUI's DB connection doesn't escape input on JDBC URL

Status: NEW Product: Utilities Classification: Unclassified Component: mwdumper (Other open bugs) Version: unspecified Hardware: PC Linux Importance: Normal normal (vote) Target Milestone: --- Assigned To: Brion Vibber URL: Whiteboard: Keywords: Depends on: Blocks:   Show dependency tree / graph		Reported: 2007-03-13 16:51 UTC by Brion Vibber Modified: 2014-02-12 23:39 UTC (History) CC List: 0 users See Also: Web browser: --- Mobile Platform: --- Assignee Huggle Beta Tester: ---

Attachments Add an attachment (proposed patch, testcase, etc.)

Description Brion Vibber 2007-03-13 16:51:32 UTC Database usernames and passwords containing & and such will probably fail due to a lack of escaping when constructing the JDBC connection URL. Comment 1 Siebrand Mazeland 2008-08-13 12:26:59 UTC Assigning to brion. Problably created before new mwdumper issues were auto-assigned.