591215 - Trying to share pathogenic collection slug name via Twitter doesn't work

Status: VERIFIED WONTFIX

(addons.mozilla.org Graveyard :: Collections, defect)

Description

[Stephen Donner [:stephend] Not actively reading bugmail]

A pathogenic case, to be sure, but trying to share https://preview.addons.mozilla.org/en-US/firefox/collections/1479610482/-xss-160-%CF%A7/ via Twitter results in it posting only:

'';!--"<XSS>=

(Probably caught on the Twitter side, but wasn't sure if we were sending stuff escaped properly, or what.)

Comment 1

[Jeff Balogh (:jbalogh)]

It's all there.  Maybe you can file a twitter bug about dirty unicode?

GET /en-US/firefox/collections/1479610482/-xss-160-%CF%A7/share?service=twitter HTTP/1.1

HTTP/1.1 302 FOUND
Location: https://twitter.com/home?status='';!--%22%3CXSS%3E=&%7B()%7D%20%20%20160%20%EF%BF%BD%CF%A7%CE%83%20::%20Add-ons%20for%20Firefox%20https://preview.addons.mozilla.org/en-US/firefox/collections/1479610482/-xss-160-%CF%A7/

Also:
pathogen |ˈpaθəjən; -ˌjen|
noun Medicine
a bacterium, virus, or other microorganism that can cause disease.

Comment 2

[Stephen Donner [:stephend] Not actively reading bugmail]

Thanks for the vocab lesson.