"Bawolff" changed the status of MediaWiki.r101014 to "fixme" and commented it.
URL: http://www.mediawiki.org/wiki/Special:Code/MediaWiki/101014#c28030

Old Status: new
> New Status: fixme

Commit summary for MediaWiki.r101014:

* Pass in $user to Revision::getText()
* Minor style cleanups

Bawolff's comment:

On my local test wiki, I revdeleted a revision then did 
http://localhost/w/phase3/index.php?title=Main_Page&oldid=2113&action=raw&ctype=text/css
 it was served with header: <code>Cache-Control public, s-maxage=300, 
max-age=18000</code> . My understanding is that if i had squid set up, it would 
be cached by squid, and then potentially severed to other folks, so then you 
just have to trick someone into viewing that url and you can get revdeleted 
stuff.

_______________________________________________
MediaWiki-CodeReview mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-codereview

Reply via email to