jenkins-bot has submitted this change and it was merged. Change subject: Enforce load.php's no-session constraint ......................................................................
Enforce load.php's no-session constraint Attempts to use session data via this endpoint will now cause exceptions to be thrown. Bug: T127233 Change-Id: Id83eda9564314bb4e11368aa395127f349b2cff4 --- M load.php 1 file changed, 2 insertions(+), 3 deletions(-) Approvals: Gergő Tisza: Looks good to me, approved jenkins-bot: Verified diff --git a/load.php b/load.php index 2b97f7a..c832237 100644 --- a/load.php +++ b/load.php @@ -25,9 +25,8 @@ use MediaWiki\Logger\LoggerFactory; // This endpoint is supposed to be independent of request cookies and other -// details of the session. Log warnings for violations of the no-session -// constraint. -define( 'MW_NO_SESSION', 'warn' ); +// details of the session. Enforce this constraint with respect to session use. +define( 'MW_NO_SESSION', 1 ); require __DIR__ . '/includes/WebStart.php'; -- To view, visit https://gerrit.wikimedia.org/r/273373 To unsubscribe, visit https://gerrit.wikimedia.org/r/settings Gerrit-MessageType: merged Gerrit-Change-Id: Id83eda9564314bb4e11368aa395127f349b2cff4 Gerrit-PatchSet: 3 Gerrit-Project: mediawiki/core Gerrit-Branch: master Gerrit-Owner: Anomie <[email protected]> Gerrit-Reviewer: Anomie <[email protected]> Gerrit-Reviewer: Gergő Tisza <[email protected]> Gerrit-Reviewer: Jforrester <[email protected]> Gerrit-Reviewer: Krinkle <[email protected]> Gerrit-Reviewer: jenkins-bot <> _______________________________________________ MediaWiki-commits mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits
