Fix #8819: full patch disclosure with skin dependencies.

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index c1b05d6..b0223e1 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -154,6 +154,7 @@ lighter making things easier to read.
 * Fix multipage selector drop-down for DjVu images to work when title
   is passed as a query string parameter; we have to pass the title as
   a form parameter or it gets dropped from the form submission URL
+* (bug 8819) Fix full path disclosure in with skins dependencies
 
 
 == Languages updated ==

diff --git a/skins/Chick.deps.php b/skins/Chick.deps.php
index 273ac18..a178a79 100644 (file)
--- a/skins/Chick.deps.php
+++ b/skins/Chick.deps.php
@@ -5,6 +5,9 @@
 // changed on a subsequent page view.
 // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html
 
+if ( ! defined( 'MEDIAWIKI' ) )
+       die( 1 );
+
 require_once('includes/SkinTemplate.php');
 require_once('MonoBook.php');
-?>
\ No newline at end of file
+?>

diff --git a/skins/MonoBook.deps.php b/skins/MonoBook.deps.php
index 8a78ae6..b054c84 100644 (file)
--- a/skins/MonoBook.deps.php
+++ b/skins/MonoBook.deps.php
@@ -5,5 +5,8 @@
 // changed on a subsequent page view.
 // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html
 
+if ( ! defined( 'MEDIAWIKI' ) )
+       die( 1 );
+
 require_once('includes/SkinTemplate.php');
-?>
\ No newline at end of file
+?>

diff --git a/skins/MySkin.deps.php b/skins/MySkin.deps.php
index ea0455f..ba00558 100644 (file)
--- a/skins/MySkin.deps.php
+++ b/skins/MySkin.deps.php
@@ -5,6 +5,9 @@
 // changed on a subsequent page view.
 // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html
 
+if ( ! defined( 'MEDIAWIKI' ) )
+       die( 1 );
+
 require_once('includes/SkinTemplate.php');
 require_once('MonoBook.php');
-?>
\ No newline at end of file
+?>

diff --git a/skins/Simple.deps.php b/skins/Simple.deps.php
index ffc5155..369f6b0 100644 (file)
--- a/skins/Simple.deps.php
+++ b/skins/Simple.deps.php
@@ -5,6 +5,9 @@
 // changed on a subsequent page view.
 // see http://mail.wikipedia.org/pipermail/wikitech-l/2006-January/033660.html
 
+if ( ! defined( 'MEDIAWIKI' ) )
+       die( 1 );
+
 require_once('includes/SkinTemplate.php');
 require_once('MonoBook.php');
-?>
\ No newline at end of file
+?>