X-Git-Url: https://git.cyclocoop.org/%27.WWW_URL.%27admin/?a=blobdiff_plain;f=RELEASE-NOTES-1.28;h=c95092173166fbbb8fa4b3c7f63e49c14a3282e5;hb=2cda917e3f3da7a66729718e9120693ede86c58b;hp=1bb8c32f5ecb949bedcece37c7b8a4a1ecc85c2a;hpb=476b59f5477f64df1869ccfa2af07ee5f3a8e3dc;p=lhc%2Fweb%2Fwiklou.git

diff --git a/RELEASE-NOTES-1.28 b/RELEASE-NOTES-1.28
index 1bb8c32f5e..c950921731 100644
--- a/RELEASE-NOTES-1.28
+++ b/RELEASE-NOTES-1.28
@@ -6,7 +6,9 @@ MediaWiki 1.28 is an alpha-quality branch and is not recommended for use in
 production.
 
 === Configuration changes in 1.28 ===
-
+* The load.php entry point now enforces the existing policy of not allowing
+  access to session data, which includes the session user and the session
+  user's language. If such access is attempted, an exception will be thrown.
 
 === New features in 1.28 ===