Per comments on code review, use JSON instead of PHP serialization for Abuse Filter...
authorAndrew Garrett <werdna@users.mediawiki.org>
Tue, 2 Jun 2009 12:59:05 +0000 (12:59 +0000)
committerAndrew Garrett <werdna@users.mediawiki.org>
Tue, 2 Jun 2009 12:59:05 +0000 (12:59 +0000)
commite2700a6071ed0f4e3e598b55f4784f1d07fda49c
tree153315221c2c18a2422b6a82db0ccb5eb4dddc25
parent1dda2c82bcb2f54b68a79c5213731ab321fbce49
Per comments on code review, use JSON instead of PHP serialization for Abuse Filter data interchange. PHP's unserialize() can expose remote code execution vulnerabilities with some input.
includes/GlobalFunctions.php