Security fix: Previously it was possible to include unprotected and even content...
authorDaniel Cannon <amidaniel@users.mediawiki.org>
Sun, 15 Jul 2007 04:57:45 +0000 (04:57 +0000)
committerDaniel Cannon <amidaniel@users.mediawiki.org>
Sun, 15 Jul 2007 04:57:45 +0000 (04:57 +0000)
commit2d92044bb7e31646bbd8432ed7440b211ec707c1
tree4b019c878c313396eeb5cb9e3da054030b94b7c1
parent502b69c62838f9d6df57476ffc44ae9a10a766d6
Security fix: Previously it was possible to include unprotected and even content pages in site and user jss/css pages via action=raw. Now when requesting a page as text/javascript or text/css, if it should not contain such content, it simply returns '/* EMPTY */'.
RELEASE-NOTES
includes/RawPage.php