From: Tim Starling Date: Thu, 5 Feb 2009 08:56:35 +0000 (+0000) Subject: * Fixed a whole lot of XSS vulnerabilities in the installer. All require a live insta... X-Git-Tag: 1.31.0-rc.0~43036 X-Git-Url: http://git.cyclocoop.org/%7B%7B%20url_for%28%27admin_vote_add%27%29%20%7D%7D?a=commitdiff_plain;h=6237fe4bb5fdd60a2c41b3a2d1e988b274dcb34a;p=lhc%2Fweb%2Fwiklou.git * Fixed a whole lot of XSS vulnerabilities in the installer. All require a live installer, i.e. with no LocalSettings.php present. * Implemented taint support in the installer and fixed some false positives (and false negatives) --- diff --git a/config/index.php b/config/index.php index 5016da1667..b1485c0870 100644 --- a/config/index.php +++ b/config/index.php @@ -92,7 +92,8 @@ $ourdb['ibm_db2']['rootuser'] = 'db2admin'; - MediaWiki <?php echo( $wgVersion ); ?> Installation + + MediaWiki <?php echo htmlspecialchars( $wgVersion ); ?> Installation