From: Brad Jorsch <bjorsch@wikimedia.org>
Date: Thu, 5 May 2016 15:35:10 +0000 (-0400)
Subject: Warn on session access in profileinfo.php and opensearch_desc.php
X-Git-Tag: 1.31.0-rc.0~7086^2
X-Git-Url: http://git.cyclocoop.org/?a=commitdiff_plain;h=53b4892ffb19b291d63452d75673e3f7059818a3;p=lhc%2Fweb%2Fwiklou.git

Warn on session access in profileinfo.php and opensearch_desc.php

These are so simple there will probably be no problems, but let's set
them to 'warn' for a week just to be sure.

Bug: T127233
Change-Id: I04007faaf541f30dcaf2085fa86b45bea1ecb754
---

diff --git a/opensearch_desc.php b/opensearch_desc.php
index bef168878f..92c182d8a7 100644
--- a/opensearch_desc.php
+++ b/opensearch_desc.php
@@ -20,6 +20,11 @@
  * @file
  */
 
+// This endpoint is supposed to be independent of request cookies and other
+// details of the session. Log warnings for violations of the no-session
+// constraint.
+define( 'MW_NO_SESSION', 'warn' );
+
 require_once __DIR__ . '/includes/WebStart.php';
 
 if ( $wgRequest->getVal( 'ctype' ) == 'application/xml' ) {
diff --git a/profileinfo.php b/profileinfo.php
index 95636093c6..466f26aaec 100644
--- a/profileinfo.php
+++ b/profileinfo.php
@@ -25,6 +25,11 @@
  * @file
  */
 
+// This endpoint is supposed to be independent of request cookies and other
+// details of the session. Log warnings for violations of the no-session
+// constraint.
+define( 'MW_NO_SESSION', 'warn' );
+
 ini_set( 'zlib.output_compression', 'off' );
 
 $wgEnableProfileInfo = false;