API: Validate API error codes

[lhc/web/wiklou.git] / RELEASE-NOTES-1.33

diff --git a/RELEASE-NOTES-1.33 b/RELEASE-NOTES-1.33
index df6b5f8..422bbfa 100644 (file)
--- a/RELEASE-NOTES-1.33
+++ b/RELEASE-NOTES-1.33
@@ -30,13 +30,15 @@ production.
 
 === New features in 1.33 ===
 * The 'GetPreferences' hook now receives an additional $context parameter.
 
 === New features in 1.33 ===
 * The 'GetPreferences' hook now receives an additional $context parameter.

-* (T96041) __EXPECT_UNUSED_CATEGORY__ on a category page causes the category
+* (T96041) __EXPECTUNUSEDCATEGORY__ on a category page causes the category

   to be hidden on Special:UnusedCategories.
   to be hidden on Special:UnusedCategories.

+* Add PasswordPolicy to check the password isn't in the large blacklist.

 * …
 
 === External library changes in 1.33 ===
 
 ==== New external libraries ====
 * …
 
 === External library changes in 1.33 ===
 
 ==== New external libraries ====

+* Added wikimedia/password-blacklist 0.1.3

 * …
 
 ==== Changed external libraries ====
 * …
 
 ==== Changed external libraries ====


@@ -66,6 +68,10 @@ production.
   Additionally, the  'APIGetDescription' and 'APIGetParamDescription' hooks have
   been removed, as their only use was to let extensions override values returned
   by getDescription() and getParamDescription(), respectively.
   Additionally, the  'APIGetDescription' and 'APIGetParamDescription' hooks have
   been removed, as their only use was to let extensions override values returned
   by getDescription() and getParamDescription(), respectively.

+* API error codes may only contain ASCII letters, numbers, underscore, and
+  hyphen. Methods such as ApiBase::dieWithError() and
+  ApiMessageTrait::setApiCode() will throw an InvalidArgumentException if
+  passed a bad code.

 * …
 
 === Languages updated in 1.33 ===
 * …
 
 === Languages updated in 1.33 ===


@@ -161,9 +167,6 @@ because of Phabricator reports.
 === Other changes in 1.33 ===
 * (T208871) The hard-coded Google search form on the database error page was
   removed.
 === Other changes in 1.33 ===
 * (T208871) The hard-coded Google search form on the database error page was
   removed.

-* The image_comment_temp database table, deprecated in 1.32, has been removed.
-  Since access should be mediated by the CommentStore class, this change
-  shouldn't affect external code.

 * …
 
 == Compatibility ==
 * …
 
 == Compatibility ==