* Do not allow previews of deleted images to be cached
authorRob Church <robchurch@users.mediawiki.org>
Mon, 1 Jan 2007 02:04:15 +0000 (02:04 +0000)
committerRob Church <robchurch@users.mediawiki.org>
Mon, 1 Jan 2007 02:04:15 +0000 (02:04 +0000)
commit3a65f760167a05b999820f77f06340473ddc3fca
tree3a6b727842e6e97326e544f87f1240e35f784b98
parentb89d3da63b0331d0c996fcc06a8fa6024ab7d385
* Do not allow previews of deleted images to be cached
* I've done this with a Cache-Control: no-cache header() call within UndeleteForm::showFile(), but I would appreciate a review to be sure this is the best method. It's possible for an administrator to preview a deleted image, and for this response to be cached such that a user without appropriate permissions can then access the preview.
RELEASE-NOTES
includes/SpecialUndelete.php