User "Tim Starling" posted a comment on MediaWiki.r89558. Full URL: http://www.mediawiki.org/wiki/Special:Code/MediaWiki/89558#c17889 Commit summary:
* Added a REQUEST_URI check to the bug 28235 handling. * Moved most of the bug 28235 code out to a separate library class, since I was running out of distinct function names. * Merged the QUERY_STRING and PATH_INFO security checks, since they are dealing with the exact same problem. Removed WebRequest::isQueryStringBad(). * Deal with img_auth.php by having it specify what extension it expects to be streaming out. This extension can then be compared with the extension that IE might detect. Comment: I'll tag r89628 for backport to 1.17wmf1 instead of this, since it will be easier. _______________________________________________ MediaWiki-CodeReview mailing list [email protected] https://lists.wikimedia.org/mailman/listinfo/mediawiki-codereview
