X-Git-Url: https://git.cyclocoop.org/%27.WWW_URL.%27admin/?a=blobdiff_plain;ds=sidebyside;f=RELEASE-NOTES-1.28;h=0078399d45a1b61966b735afb39a590fc522dcbb;hb=97d9916a3d168c075cca59d9bc0b05cad255f677;hp=42d639a354c95b36dae6f06c25000aa082817f0b;hpb=af9f78a67bccb3f5ca2b7b452261a7ab94caafbe;p=lhc%2Fweb%2Fwiklou.git diff --git a/RELEASE-NOTES-1.28 b/RELEASE-NOTES-1.28 index 42d639a354..0078399d45 100644 --- a/RELEASE-NOTES-1.28 +++ b/RELEASE-NOTES-1.28 @@ -6,6 +6,7 @@ MediaWiki 1.28 is an alpha-quality branch and is not recommended for use in production. === Configuration changes in 1.28 === +* $wgSend404Code now affects status code of action=history if the page is not there. * BREAKING CHANGE: $wgHTTPProxy is now *required* for all external requests made by MediaWiki via a proxy. Relying on the http_proxy environment variable is no longer supported. @@ -66,6 +67,7 @@ production. ==== Upgraded external libraries ==== * Updated es5-shim from v4.1.5 to v4.5.8 * Updated composer/semver from v1.4.1 to v1.4.2 +* Updated wikimedia/php-session-serializer from v1.0.3 to v1.0.4 ==== New external libraries ==== * Added wikimedia/scoped-callback v1.0.0 @@ -74,6 +76,7 @@ production. ==== Removed and replaced external libraries ==== === Bug fixes in 1.28 === +* (T146496) action=history pages should return 404 HTTP error code if the page does not exist * (T137264) SECURITY: XSS in unclosed internal links * (T133147) SECURITY: Escape '<' and ']]>' in inline