dépôts / lhc / web / wiklou.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 410d33d) | patch
SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput
authorBrad Jorsch <bjorsch@wikimedia.org>
Thu, 10 Jul 2014 19:16:29 +0000 (12:16 -0700)
committermglaser <glaser@hallowelt.biz>
Wed, 30 Jul 2014 18:26:58 +0000 (20:26 +0200)
commit7c35170ede7019e72eee6a1788de493b8251c100
tree41e8821c7ba925c043a9ba80ddaa09e3c97bd393tree | snapshot
parent410d33d36e9a4fe28f54aa4347310c52762b6e5ecommit | diff
SECURITY: Copy prevent-clickjacking between OutputPage and ParserOutput

Special page transclusion returns an OutputPage, whose metadata is
copied into the ParserOutput, and then later back into an OutputPage.
The "preventClickjacking" flag should be part of that metadata.

Bug: 65778
Change-Id: I17d2720fb94bb383a92059e5adbf6c16ee3e9ef4
includes/OutputPage.php diff | blob | history
includes/parser/ParserOutput.php diff | blob | history
Wiklou, le Wiki du Wiklou