Those wishing to use the latest code instead of a branch release can obtain
it from source control: http://www.mediawiki.org/wiki/Download_from_SVN
+== Configuration changes ==
+
+Some default configuration options have changed:
+* $wgAllowExternalImages now defaults to off for increased security.
+
+
== Changes since 1.6 ==
* (bug 5458) Fix double-URL encoding in block log link in contribs and contribs
* Introduce $wgContentNamespaces which allows for articles to exist in namespaces other
than the main namespace, and still be counted as valid content in the site statistics.
* (bug 5932) Introduce {{PAGESINNAMESPACE}} magic word
+* Disable $wgAllowExternalImages by default.
+
== Compatibility ==
$wgDisableCookieCheck = false;
/** Whether to allow inline image pointing to other websites */
-$wgAllowExternalImages = true;
+$wgAllowExternalImages = false;
/** If the above is false, you can specify an exception here. Image URLs
* that start with this string are then rendered, while all others are not.