From d461fc3bd6a095ce1330c554f420580ee82a2233 Mon Sep 17 00:00:00 2001 From: Brad Jorsch Date: Thu, 5 May 2016 11:23:04 -0400 Subject: [PATCH] Release note for Id83eda95 Change-Id: I85f1856c3b5a5670931a5d718c6e747cf44ce798 --- RELEASE-NOTES-1.28 | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/RELEASE-NOTES-1.28 b/RELEASE-NOTES-1.28 index 1bb8c32f5e..c950921731 100644 --- a/RELEASE-NOTES-1.28 +++ b/RELEASE-NOTES-1.28 @@ -6,7 +6,9 @@ MediaWiki 1.28 is an alpha-quality branch and is not recommended for use in production. === Configuration changes in 1.28 === - +* The load.php entry point now enforces the existing policy of not allowing + access to session data, which includes the session user and the session + user's language. If such access is attempted, an exception will be thrown. === New features in 1.28 === -- 2.20.1