From: Antoine Musso <hashar@users.mediawiki.org>
Date: Mon, 29 Jan 2007 21:15:34 +0000 (+0000)
Subject: Fix #8819: full patch disclosure with skin dependencies.
X-Git-Tag: 1.31.0-rc.0~54169
X-Git-Url: http://git.cyclocoop.org/%40spipnet%40?a=commitdiff_plain;h=90759fa8a1a5187d881763ea89f9ca2f0a5f8a4a;p=lhc%2Fweb%2Fwiklou.git

Fix #8819: full patch disclosure with skin dependencies.
---

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index c1b05d60b6..b0223e18ba 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -154,6 +154,7 @@ lighter making things easier to read.
 * Fix multipage selector drop-down for DjVu images to work when title
   is passed as a query string parameter; we have to pass the title as
   a form parameter or it gets dropped from the form submission URL
+* (bug 8819) Fix full path disclosure in with skins dependencies
 
 
 == Languages updated ==
diff --git a/skins/Chick.deps.php b/skins/Chick.deps.php
index 273ac18b44..a178a79195 100644
--- a/skins/Chick.deps.php
+++ b/skins/Chick.deps.php
@@ -5,6 +5,9 @@
 // changed on a subsequent page view.
 // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html
 
+if ( ! defined( 'MEDIAWIKI' ) )
+	die( 1 );
+
 require_once('includes/SkinTemplate.php');
 require_once('MonoBook.php');
-?>
\ No newline at end of file
+?>
diff --git a/skins/MonoBook.deps.php b/skins/MonoBook.deps.php
index 8a78ae6bb3..b054c840c2 100644
--- a/skins/MonoBook.deps.php
+++ b/skins/MonoBook.deps.php
@@ -5,5 +5,8 @@
 // changed on a subsequent page view.
 // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html
 
+if ( ! defined( 'MEDIAWIKI' ) )
+	die( 1 );
+
 require_once('includes/SkinTemplate.php');
-?>
\ No newline at end of file
+?>
diff --git a/skins/MySkin.deps.php b/skins/MySkin.deps.php
index ea0455f222..ba00558b10 100644
--- a/skins/MySkin.deps.php
+++ b/skins/MySkin.deps.php
@@ -5,6 +5,9 @@
 // changed on a subsequent page view.
 // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html
 
+if ( ! defined( 'MEDIAWIKI' ) )
+	die( 1 );
+
 require_once('includes/SkinTemplate.php');
 require_once('MonoBook.php');
-?>
\ No newline at end of file
+?>
diff --git a/skins/Simple.deps.php b/skins/Simple.deps.php
index ffc51557ab..369f6b00ce 100644
--- a/skins/Simple.deps.php
+++ b/skins/Simple.deps.php
@@ -5,6 +5,9 @@
 // changed on a subsequent page view.
 // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html
 
+if ( ! defined( 'MEDIAWIKI' ) )
+	die( 1 );
+
 require_once('includes/SkinTemplate.php');
 require_once('MonoBook.php');
-?>
\ No newline at end of file
+?>