Merge "Warn on session access in profileinfo.php and opensearch_desc.php"

diff --git a/opensearch_desc.php b/opensearch_desc.php
index bef1688..92c182d 100644 (file)
--- a/opensearch_desc.php
+++ b/opensearch_desc.php
@@ -20,6 +20,11 @@
  * @file
  */
 
+// This endpoint is supposed to be independent of request cookies and other
+// details of the session. Log warnings for violations of the no-session
+// constraint.
+define( 'MW_NO_SESSION', 'warn' );
+
 require_once __DIR__ . '/includes/WebStart.php';
 
 if ( $wgRequest->getVal( 'ctype' ) == 'application/xml' ) {

diff --git a/profileinfo.php b/profileinfo.php
index 9563609..466f26a 100644 (file)
--- a/profileinfo.php
+++ b/profileinfo.php
@@ -25,6 +25,11 @@
  * @file
  */
 
+// This endpoint is supposed to be independent of request cookies and other
+// details of the session. Log warnings for violations of the no-session
+// constraint.
+define( 'MW_NO_SESSION', 'warn' );
+
 ini_set( 'zlib.output_compression', 'off' );
 
 $wgEnableProfileInfo = false;