X-Git-Url: http://git.cyclocoop.org/?a=blobdiff_plain;f=RELEASE-NOTES-1.28;h=78986d7b361a962bd252d362e3a1fce8d568618a;hb=ee1f1c06d7bf8f4634989f9a3f270dd68b293276;hp=42d639a354c95b36dae6f06c25000aa082817f0b;hpb=7c6d2a0fa28746b49d79345b609d9c7605ed4d63;p=lhc%2Fweb%2Fwiklou.git diff --git a/RELEASE-NOTES-1.28 b/RELEASE-NOTES-1.28 index 42d639a354..78986d7b36 100644 --- a/RELEASE-NOTES-1.28 +++ b/RELEASE-NOTES-1.28 @@ -6,6 +6,7 @@ MediaWiki 1.28 is an alpha-quality branch and is not recommended for use in production. === Configuration changes in 1.28 === +* $wgSend404Code now affects status code of action=history if the page is not there. * BREAKING CHANGE: $wgHTTPProxy is now *required* for all external requests made by MediaWiki via a proxy. Relying on the http_proxy environment variable is no longer supported. @@ -66,6 +67,7 @@ production. ==== Upgraded external libraries ==== * Updated es5-shim from v4.1.5 to v4.5.8 * Updated composer/semver from v1.4.1 to v1.4.2 +* Updated wikimedia/php-session-serializer from v1.0.3 to v1.0.4 ==== New external libraries ==== * Added wikimedia/scoped-callback v1.0.0 @@ -74,6 +76,7 @@ production. ==== Removed and replaced external libraries ==== === Bug fixes in 1.28 === +* (T146496) action=history pages should return 404 HTTP error code if the page does not exist * (T137264) SECURITY: XSS in unclosed internal links * (T133147) SECURITY: Escape '<' and ']]>' in inline