From db562437e3c609f432fb1df1a65af8dc65e1ecd5 Mon Sep 17 00:00:00 2001
From: sbassett <sbassett@wikimedia.org>
Date: Tue, 11 Feb 2020 17:03:40 -0600
Subject: [PATCH] Prevent changing the target of an interface button with user
 content

Adds the [data-mw="interface"] selector to the '#pt-logout a' click
handler added in 8f033911030d.

Bug: T232932
---
 resources/src/mediawiki.page.ready/ready.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/resources/src/mediawiki.page.ready/ready.js b/resources/src/mediawiki.page.ready/ready.js
index 3f6f89b0f1..bf29d3e329 100644
--- a/resources/src/mediawiki.page.ready/ready.js
+++ b/resources/src/mediawiki.page.ready/ready.js
@@ -54,7 +54,7 @@ $( function () {
 	} );
 
 	// Turn logout to a POST action
-	$( '#pt-logout a' ).on( 'click', function ( e ) {
+	$( '#pt-logout a[data-mw="interface"]' ).on( 'click', function ( e ) {
 		var api = new mw.Api(),
 			url = this.href;
 		mw.notify(
-- 
2.22.0

