http://www.mediawiki.org/wiki/Special:Code/MediaWiki/90686

Revision: 90686
Author:   neilk
Date:     2011-06-24 00:39:44 +0000 (Fri, 24 Jun 2011)
Log Message:
-----------
merged r90649

Modified Paths:
--------------
    branches/REL1_18/extensions/UploadWizard/resources/mw.Api.js

Property Changed:
----------------
    branches/REL1_18/extensions/UploadWizard/resources/mw.Api.js

Modified: branches/REL1_18/extensions/UploadWizard/resources/mw.Api.js
===================================================================
--- branches/REL1_18/extensions/UploadWizard/resources/mw.Api.js        
2011-06-24 00:25:14 UTC (rev 90685)
+++ branches/REL1_18/extensions/UploadWizard/resources/mw.Api.js        
2011-06-24 00:39:44 UTC (rev 90686)
@@ -122,7 +122,11 @@
                ajax: function( parameters, ajaxOptions ) {
                        parameters = $j.extend( {}, this.defaults.parameters, 
parameters );
                        ajaxOptions = $j.extend( {}, this.defaults.ajax, 
ajaxOptions );
-                       ajaxOptions.data = parameters;
+
+                       // Some deployed MediaWiki >= 1.17 forbid periods in 
URLs, due to an IE XSS bug
+                       // So let's escape them here. See bug #28235
+                       // This works because jQuery accepts data as a query 
string or as an Object
+                       ajaxOptions.data = $j.param( parameters ).replace( 
/\./g, '%2E' );
                
                        ajaxOptions.error = function( xhr, textStatus, 
exception ) {
                                ajaxOptions.err( 'http', { xhr: xhr, 
textStatus: textStatus, exception: exception } );


Property changes on: 
branches/REL1_18/extensions/UploadWizard/resources/mw.Api.js
___________________________________________________________________
Added: svn:mergeinfo
   + 
/branches/uploadwizard/extensions/UploadWizard/resources/mw.Api.js:73550-75905
/trunk/extensions/UploadWizard/resources/mw.Api.js:90649
/trunk/phase3/extensions/UploadWizard/resources/mw.Api.js:85939


_______________________________________________
MediaWiki-CVS mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-cvs

Reply via email to