Revision: 48531
Author:   tstarling
Date:     2009-03-18 20:20:10 +0000 (Wed, 18 Mar 2009)

Log Message:
-----------
Use a content type that's not an XSS risk

Modified Paths:
--------------
    trunk/phase3/includes/AjaxResponse.php

Modified: trunk/phase3/includes/AjaxResponse.php
===================================================================
--- trunk/phase3/includes/AjaxResponse.php      2009-03-18 20:17:33 UTC (rev 
48530)
+++ trunk/phase3/includes/AjaxResponse.php      2009-03-18 20:20:10 UTC (rev 
48531)
@@ -45,7 +45,7 @@
                $this->mText = '';
                $this->mResponseCode = '200 OK';
                $this->mLastModified = false;
-               $this->mContentType= 'text/html; charset=utf-8';
+               $this->mContentType= 'application/x-wiki';
 
                if ( $text ) {
                        $this->addText( $text );



_______________________________________________
MediaWiki-CVS mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-cvs

Reply via email to