Bug 7369 - Allow "Show Changes" without requiring edit token; Patch by Werdna.

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 5beb3a5..b1ec47e 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -85,6 +85,7 @@ it from source control: http://www.mediawiki.org/wiki/Download_from_SVN
 * (bug 7663) Include language variant switcher links on Nostalgia skin
 * (bug 6531) Fix PHP fatal error on installation page with bad username input.
 * (bug 6977) Remove 404 link for autogenerated database documentation.
+* (bug 7369) Allow "Show Changes" without requiring edit token.
 
 
 == Languages updated ==

diff --git a/includes/EditPage.php b/includes/EditPage.php
index ce224e5..1dad05e 100644 (file)
--- a/includes/EditPage.php
+++ b/includes/EditPage.php
@@ -439,6 +439,9 @@ class EditPage {
                                        # The unmarked state will be assumed to be a save,
                                        # if the form seems otherwise complete.
                                        wfDebug( "$fname: Passed token check.\n" );
+                               } else if ( $this->diff ) {
+                                       # Failed token check, but only requested "Show Changes".
+                                       wfDebug( "$fname: Failed token check; Show Changes requested.\n" );
                                } else {
                                        # Page might be a hack attempt posted from
                                        # an external site. Preview instead of saving.