Index: branches/REL1_16/phase3/includes/DefaultSettings.php |
— | — | @@ -33,7 +33,7 @@ |
34 | 34 | } |
35 | 35 | |
36 | 36 | /** MediaWiki version number */ |
37 | | -$wgVersion = '1.16.2'; |
| 37 | +$wgVersion = '1.16.3'; |
38 | 38 | |
39 | 39 | /** Name of the site. It must be changed in LocalSettings.php */ |
40 | 40 | $wgSitename = 'MediaWiki'; |
Index: branches/REL1_16/phase3/RELEASE-NOTES |
— | — | @@ -1,8 +1,8 @@ |
2 | 2 | = MediaWiki release notes = |
3 | 3 | |
4 | | -== MediaWiki 1.16.2 == |
| 4 | +== MediaWiki 1.16.3 == |
5 | 5 | |
6 | | -2011-02-01 |
| 6 | +2011-04-12 |
7 | 7 | |
8 | 8 | This is a security and maintenance release of the MediaWiki 1.16 branch. |
9 | 9 | |
— | — | @@ -45,9 +45,12 @@ |
46 | 46 | further. |
47 | 47 | |
48 | 48 | == Changes since 1.16.2 == |
49 | | -* (bug 15641) Fixed permissions checks in Special:Import which allowed users |
| 49 | +* (bug 28449) Fixed permissions checks in Special:Import which allowed users |
50 | 50 | without the 'import' permission to import pages from the configured import |
51 | 51 | sources. |
| 52 | +* (bug 28235) Fixed XSS affecting IE 6 and earlier clients only, due to those |
| 53 | + browsers looking for a file extension in the query string of the URL, and |
| 54 | + ignoring the Content-Type header if one is found. |
52 | 55 | |
53 | 56 | == Changes since 1.16.1 == |
54 | 57 | |