| Index: branches/REL1_16/phase3/maintenance/tests/MediaWikiParserTest.php |
| — | — | @@ -1,5 +1,9 @@ |
| 2 | 2 | <?php |
| 3 | 3 | |
| | 4 | +if ( !defined( 'MEDIAWIKI' ) ) { |
| | 5 | + exit; |
| | 6 | +} |
| | 7 | + |
| 4 | 8 | global $IP; |
| 5 | 9 | define( "NO_COMMAND_LINE", 1 ); |
| 6 | 10 | define( "PARSER_TESTS", "$IP/maintenance/parserTests.txt" ); |
| Index: branches/REL1_16/phase3/RELEASE-NOTES |
| — | — | @@ -64,9 +64,12 @@ |
| 65 | 65 | * (bug xxxxx) Fixed Cache-Control headers sent from API modules, to protect |
| 66 | 66 | user privacy in the case where an attacker can access the wiki through the |
| 67 | 67 | same HTTP proxy as a logged-in user. |
| 68 | | -* Fixed XSS in profileinfo.php for users with $wgEnableProfileInfo = true; |
| | 68 | +* Fixed an XSS vulnerability in profileinfo.php for installations with |
| | 69 | + $wgEnableProfileInfo = true (false by default) |
| 69 | 70 | * Fixed a case where an X-Vary-Options header was sent despite $wgUseXVO being |
| 70 | 71 | false. Fixed a minor header parsing issue when $wgUseXVO = true. |
| | 72 | +* Fixed a register_globals arbitrary inclusion vulnerability in |
| | 73 | + MediaWikiParserTest.php, introduced in 1.16 beta 1. |
| 71 | 74 | |
| 72 | 75 | == Changes since 1.16 beta 2 == |
| 73 | 76 | |