From: Brad Jorsch <bjorsch@wikimedia.org>
Date: Thu, 5 May 2016 15:23:04 +0000 (-0400)
Subject: Release note for Id83eda95
X-Git-Tag: 1.31.0-rc.0~7087
X-Git-Url: http://git.cyclocoop.org/%22%20.%20generer_url_aide%28?a=commitdiff_plain;h=d461fc3bd6a095ce1330c554f420580ee82a2233;p=lhc%2Fweb%2Fwiklou.git

Release note for Id83eda95

Change-Id: I85f1856c3b5a5670931a5d718c6e747cf44ce798
---

diff --git a/RELEASE-NOTES-1.28 b/RELEASE-NOTES-1.28
index 1bb8c32f5e..c950921731 100644
--- a/RELEASE-NOTES-1.28
+++ b/RELEASE-NOTES-1.28
@@ -6,7 +6,9 @@ MediaWiki 1.28 is an alpha-quality branch and is not recommended for use in
 production.
 
 === Configuration changes in 1.28 ===
-
+* The load.php entry point now enforces the existing policy of not allowing
+  access to session data, which includes the session user and the session
+  user's language. If such access is attempted, an exception will be thrown.
 
 === New features in 1.28 ===