Restore the complete prohibition on action=raw with arbitrary script entry points.
authorBrion Vibber <brion@users.mediawiki.org>
Sat, 19 Jan 2008 01:18:23 +0000 (01:18 +0000)
committerBrion Vibber <brion@users.mediawiki.org>
Sat, 19 Jan 2008 01:18:23 +0000 (01:18 +0000)
commitda6377abb198b21f4241236c3420e9a4a21ccb53
tree1a2c04d7f6fe561a84739bedcb3b399d5ea199db
parentf01c5fbb92ebf1b8a564f75588bb7e17a530ad8b
Restore the complete prohibition on action=raw with arbitrary script entry points.
While only MSIE is known to let the URL's "extension" override the allowed mime types, other browsers will still happily download a file with the name from the URL. That seems unwise as the content may be arbitrary (and perhaps executable).
includes/RawPage.php