Fix #1 for WMF vulnerability

diff --git a/includes/Linker.php b/includes/Linker.php
index d400bef..b9c5d07 100644 (file)
--- a/includes/Linker.php
+++ b/includes/Linker.php
@@ -381,6 +381,10 @@ class Linker {
                global $wgContLang, $wgUser, $wgThumbLimits;
                
                $img   = new Image( $nt );
+               if ( !$img->allowInlineDisplay() ) {
+                       return $this->makeKnownLinkObj( $nt );
+               }
+
                $url   = $img->getViewURL();
                $prefix = $postfix = '';