| Index: trunk/extensions/UploadWizard/resources/mw.Api.js |
| — | — | @@ -122,7 +122,11 @@ |
| 123 | 123 | ajax: function( parameters, ajaxOptions ) { |
| 124 | 124 | parameters = $j.extend( {}, this.defaults.parameters, parameters ); |
| 125 | 125 | ajaxOptions = $j.extend( {}, this.defaults.ajax, ajaxOptions ); |
| 126 | | - ajaxOptions.data = parameters; |
| | 126 | + |
| | 127 | + // Some deployed MediaWiki >= 1.17 forbid periods in URLs, due to an IE XSS bug |
| | 128 | + // So let's escape them here. See bug #28235 |
| | 129 | + // This works because jQuery accepts data as a query string or as an Object |
| | 130 | + ajaxOptions.data = $j.param( parameters ).replace( /\./g, '%2E' ); |
| 127 | 131 | |
| 128 | 132 | ajaxOptions.error = function( xhr, textStatus, exception ) { |
| 129 | 133 | ajaxOptions.err( 'http', { xhr: xhr, textStatus: textStatus, exception: exception } ); |