dépôts / lhc / web / wiklou.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1e29960) | patch
When detecting $wgServer, do not fall back to $_SERVER['HTTP_HOST']. It's unlikely...
authorTim Starling <tstarling@users.mediawiki.org>
Tue, 7 Jun 2011 03:31:09 +0000 (03:31 +0000)
committerTim Starling <tstarling@users.mediawiki.org>
Tue, 7 Jun 2011 03:31:09 +0000 (03:31 +0000)
commit04030f324c41bcc6d938fa3cad42b10261ca17dd
tree21160eae1f83f7c5f759a39cccf2ef4d95ac7d23tree | snapshot
parent1e29960c61ee9cfed5488835f2fa1beefca20de1commit | diff
When detecting $wgServer, do not fall back to $_SERVER['HTTP_HOST']. It's unlikely that this is used by anything, since SERVER_NAME takes precedence, and SERVER_NAME is required by CGI 1.1 and appears to always be set by the major web servers. If it were ever used, it would open up a cache-poisoning vulnerability. Partially reverts r8010.
includes/DefaultSettings.php diff | blob | history
Wiklou, le Wiki du Wiklou