Fix for bug 2522

[lhc/web/wiklou.git] / RELEASE-NOTES

diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index f7624b0..9245c39 100644 (file)
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -405,6 +405,15 @@ fully support the editing toolbar, but was found to be too confusing.
   Special:Export form, 'exportnohistory' message to translate live hack.
 * (bug 4453) fix for __TOC__ dollar-number breakage
 * Maintenance script to delete unused user accounts
+* (bug 4334) Add "watch" links to Special:Unwatchedpages
+* Added detection for WMF files (application/x-msmetafile), added this 
+  MIME type to the default blacklist. Prevented inline display of images
+  which are not of known image types. This is in response to
+  http://en.wikipedia.org/wiki/Windows_Metafile_vulnerability
+* (bug 4507) Adjust FULLPAGENAMEE escaping to standard form
+* Blocked users can no longer roll back, change the protection of, or delete/undelete pages
+* Protect against spoofing of X-Forwarded-For header
+
 
 === Caveats ===