The MassEditRegex extension allows administrators perform a single edit across multiple pages in one step, by running a regular expression over the content of each page.
Details
Details
May 12 2026
May 12 2026
gerritbot added a comment to T311949: Remove use of $wgAjaxExportList setting (removed in MediaWiki 1.38.x).
Change #811256 abandoned by Thiemo Kreuz (WMDE):
[mediawiki/extensions/MassEditRegex@master] Removal of $wgAjaxExportList setting from MassEditRegex
May 8 2026
May 8 2026
gerritbot added a comment to T283699: Replace Content::getNativeData() calls with TextContent::getText() in MassEditRegex.
Change #1285449 merged by Umherirrender:
[mediawiki/extensions/MassEditRegex@REL1_46] Replace getNativeData to getText for MassEditRegex
gerritbot added a comment to T283699: Replace Content::getNativeData() calls with TextContent::getText() in MassEditRegex.
Change #1285449 had a related patch set uploaded (by Umherirrender; author: Russ Rogovetz):
[mediawiki/extensions/MassEditRegex@REL1_46] Replace getNativeData to getText for MassEditRegex
gerritbot added a comment to T283699: Replace Content::getNativeData() calls with TextContent::getText() in MassEditRegex.
Change #843482 merged by Umherirrender:
[mediawiki/extensions/MassEditRegex@master] Replace getNativeData to getText for MassEditRegex
Sep 9 2025
Sep 9 2025
SomeRandomDeveloper added a comment to T371646: MassEditRegexSpecialPage can call Category::getMembers with nonsensical values.
This was fixed with https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MassEditRegex/+/1182604
Aug 28 2025
Aug 28 2025
gerritbot added a comment to T163056: [MassEditRegex] When more then 3 categories are specified, a database error occurs.
Change #1182606 merged by jenkins-bot:
[mediawiki/extensions/MassEditRegex@REL1_43] Avoid querying for more category members if we have already reached the page limit
gerritbot added a comment to T163056: [MassEditRegex] When more then 3 categories are specified, a database error occurs.
Change #1182605 merged by jenkins-bot:
[mediawiki/extensions/MassEditRegex@REL1_44] Avoid querying for more category members if we have already reached the page limit
gerritbot added a comment to T163056: [MassEditRegex] When more then 3 categories are specified, a database error occurs.
Change #1182604 merged by jenkins-bot:
[mediawiki/extensions/MassEditRegex@master] Avoid querying for more category members if we have already reached the page limit
gerritbot added a comment to T163056: [MassEditRegex] When more then 3 categories are specified, a database error occurs.
Change #1182607 merged by jenkins-bot:
[mediawiki/extensions/MassEditRegex@REL1_39] Avoid querying for more category members if we have already reached the page limit
Aug 27 2025
Aug 27 2025
gerritbot added a comment to T163056: [MassEditRegex] When more then 3 categories are specified, a database error occurs.
Change #1182607 had a related patch set uploaded (by SomeRandomDeveloper; author: SomeRandomDeveloper):
[mediawiki/extensions/MassEditRegex@REL1_39] Avoid querying for more category members if we have already reached the page limit
gerritbot added a comment to T163056: [MassEditRegex] When more then 3 categories are specified, a database error occurs.
Change #1182606 had a related patch set uploaded (by SomeRandomDeveloper; author: SomeRandomDeveloper):
[mediawiki/extensions/MassEditRegex@REL1_43] Avoid querying for more category members if we have already reached the page limit
gerritbot added a comment to T163056: [MassEditRegex] When more then 3 categories are specified, a database error occurs.
Change #1182605 had a related patch set uploaded (by SomeRandomDeveloper; author: SomeRandomDeveloper):
[mediawiki/extensions/MassEditRegex@REL1_44] Avoid querying for more category members if we have already reached the page limit
gerritbot added a comment to T163056: [MassEditRegex] When more then 3 categories are specified, a database error occurs.
Change #1182604 had a related patch set uploaded (by SomeRandomDeveloper; author: SomeRandomDeveloper):
[mediawiki/extensions/MassEditRegex@master] Avoid querying for more category members if we have already reached the page limit
SomeRandomDeveloper added a comment to T163056: [MassEditRegex] When more then 3 categories are specified, a database error occurs.
This happens when previewing and the extension checks another category while having found at least 20 matches.
SomeRandomDeveloper added a comment to T163056: [MassEditRegex] When more then 3 categories are specified, a database error occurs.
Full backtrace (https://issue-tracker.miraheze.org/T14193):
Jul 7 2025
Jul 7 2025
• Jly removed a project from T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex: Patch-For-Review.
Jun 30 2025
Jun 30 2025
• Jly renamed T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex from Stored XSS through system messages in MassEditRegex to CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Jun 25 2025
Jun 25 2025
SomeRandomDeveloper closed T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex as Resolved.
Merged and backported to 1.44, 1.43, 1.42 and 1.39.
gerritbot added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Change #1163881 merged by jenkins-bot:
[mediawiki/extensions/MassEditRegex@REL1_42] SECURITY: Escape system messages in diff headers
gerritbot added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Change #1163882 merged by jenkins-bot:
[mediawiki/extensions/MassEditRegex@REL1_39] SECURITY: Escape system messages in diff headers
gerritbot added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Change #1163880 merged by jenkins-bot:
[mediawiki/extensions/MassEditRegex@REL1_43] SECURITY: Escape system messages in diff headers
gerritbot added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Change #1163879 merged by jenkins-bot:
[mediawiki/extensions/MassEditRegex@REL1_44] SECURITY: Escape system messages in diff headers
gerritbot added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Change #1163878 merged by jenkins-bot:
[mediawiki/extensions/MassEditRegex@master] SECURITY: Escape system messages in diff headers
gerritbot added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Change #1163882 had a related patch set uploaded (by SomeRandomDeveloper; author: SomeRandomDeveloper):
[mediawiki/extensions/MassEditRegex@REL1_39] SECURITY: Escape system messages in diff headers
gerritbot added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Change #1163881 had a related patch set uploaded (by SomeRandomDeveloper; author: SomeRandomDeveloper):
[mediawiki/extensions/MassEditRegex@REL1_42] SECURITY: Escape system messages in diff headers
gerritbot added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Change #1163880 had a related patch set uploaded (by SomeRandomDeveloper; author: SomeRandomDeveloper):
[mediawiki/extensions/MassEditRegex@REL1_43] SECURITY: Escape system messages in diff headers
gerritbot added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Change #1163879 had a related patch set uploaded (by SomeRandomDeveloper; author: SomeRandomDeveloper):
[mediawiki/extensions/MassEditRegex@REL1_44] SECURITY: Escape system messages in diff headers
gerritbot added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Change #1163878 had a related patch set uploaded (by SomeRandomDeveloper; author: SomeRandomDeveloper):
[mediawiki/extensions/MassEditRegex@master] SECURITY: Escape system messages in diff headers
Jun 23 2025
Jun 23 2025
sbassett edited projects for T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex, added: SecTeam-Processed; removed Security-Team.
Jun 18 2025
Jun 18 2025
sbassett added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
MassEditRegex does not appear to be bundled or Wikimedia-deployed, so the patch can get pushed through gerrit and we'll add it to the supplemental release once it's merged.
SomeRandomDeveloper added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Patch (on top of https://gerrit.wikimedia.org/r/c/mediawiki/extensions/MassEditRegex/+/1160772 which should be merged and backported to REL1_44 first; the security patch might not apply without conflicts on REL1_42 and REL1_43):
SomeRandomDeveloper added a comment to T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
Added @Malvineous as the extension maintainer.
SomeRandomDeveloper updated subscribers of T397334: CVE-2025-53500: Stored XSS through system messages in MassEditRegex.
May 23 2025
May 23 2025
Nov 19 2024
Nov 19 2024
• Aklapper placed T311949: Remove use of $wgAjaxExportList setting (removed in MediaWiki 1.38.x) up for grabs.
@Diesel_kapasule: Removing task assignee as this open task has been assigned for more than two years - See the email sent to task assignee on October 11th.
Please assign this task to yourself again if you still realistically [plan to] work on this task - it would be welcome! :)
If this task has been resolved in the meantime, or should not be worked on by anybody ("declined"), please update its task status via "Add Action… 🡒 Change Status".
Also see https://www.mediawiki.org/wiki/Bug_management/Assignee_cleanup for tips how to best manage your individual work in Phabricator. Thanks!
• Aklapper placed T283699: Replace Content::getNativeData() calls with TextContent::getText() in MassEditRegex up for grabs.
@RussRogovetz: Removing task assignee as this open task has been assigned for more than two years - See the email sent to task assignee on October 11th.
Please assign this task to yourself again if you still realistically [plan to] work on this task - it would be welcome! :)
If this task has been resolved in the meantime, or should not be worked on by anybody ("declined"), please update its task status via "Add Action… 🡒 Change Status".
Also see https://www.mediawiki.org/wiki/Bug_management/Assignee_cleanup for tips how to best manage your individual work in Phabricator. Thanks!
Oct 10 2024
Oct 10 2024
• Aklapper edited projects for T283699: Replace Content::getNativeData() calls with TextContent::getText() in MassEditRegex, added: Patch-Needs-Improvement; removed Patch-For-Review.
Aug 1 2024
Aug 1 2024
TheVoidwalker updated the task description for T371646: MassEditRegexSpecialPage can call Category::getMembers with nonsensical values.