| Index: branches/REL1_16/phase3/RELEASE-NOTES |
| — | — | @@ -65,6 +65,8 @@ |
| 66 | 66 | user privacy in the case where an attacker can access the wiki through the |
| 67 | 67 | same HTTP proxy as a logged-in user. |
| 68 | 68 | * Fixed XSS in profileinfo.php for users with $wgEnableProfileInfo = true; |
| | 69 | +* Fixed a case where an X-Vary-Options header was sent despite $wgUseXVO being |
| | 70 | + false. Fixed a minor header parsing issue when $wgUseXVO = true. |
| 69 | 71 | |
| 70 | 72 | == Changes since 1.16 beta 2 == |
| 71 | 73 | |