| Index: branches/REL1_18/extensions/UploadWizard/resources/mw.Api.js |
| — | — | @@ -122,7 +122,11 @@ |
| 123 | 123 | ajax: function( parameters, ajaxOptions ) { |
| 124 | 124 | parameters = $j.extend( {}, this.defaults.parameters, parameters ); |
| 125 | 125 | ajaxOptions = $j.extend( {}, this.defaults.ajax, ajaxOptions ); |
| 126 | | - ajaxOptions.data = parameters; |
| | 126 | + |
| | 127 | + // Some deployed MediaWiki >= 1.17 forbid periods in URLs, due to an IE XSS bug |
| | 128 | + // So let's escape them here. See bug #28235 |
| | 129 | + // This works because jQuery accepts data as a query string or as an Object |
| | 130 | + ajaxOptions.data = $j.param( parameters ).replace( /\./g, '%2E' ); |
| 127 | 131 | |
| 128 | 132 | ajaxOptions.error = function( xhr, textStatus, exception ) { |
| 129 | 133 | ajaxOptions.err( 'http', { xhr: xhr, textStatus: textStatus, exception: exception } ); |
| Property changes on: branches/REL1_18/extensions/UploadWizard/resources/mw.Api.js |
| ___________________________________________________________________ |
| Added: svn:mergeinfo |
| 130 | 134 | Merged /trunk/extensions/UploadWizard/resources/mw.Api.js:r90649 |
| 131 | 135 | Merged /trunk/phase3/extensions/UploadWizard/resources/mw.Api.js:r85939 |
| 132 | 136 | Merged /branches/uploadwizard/extensions/UploadWizard/resources/mw.Api.js:r73550-75905 |