Commit graph

9 commits

Author SHA1 Message Date
Roan Kattouw 69381c912e API: Make output containing private or user-specific data uncacheable for logged-in users by setting Vary: Cookie or Cache-Control: private, whichever is appropriate. Fixes instances in core and WMF-deployed extensions only. Without this change, the output of requests like ?action=query&list=recentchanges&rcprop=patrolled&smaxage=3600 would be cached in Squid and viewable for anyone using the same URL, even if they don't have patrol rights. Other, more serious exploits are also possible. Also avoid using $wgUser in one place, kill some unused global $wgUser; instances and tweak a comment. 2010-07-14 19:00:54 +00:00
Sam Reed 42e226f39d Correct the address of the FSF in extension GPL headers
59 Temple Place -> 51 Franklin Street
2010-06-21 13:45:17 +00:00
Sam Reed 2b8ecad3d9 Minor fixup to api/ApiThreadAction.php
Add getPossibleErrors to CentralAuth and AbuseFilter
2010-02-16 22:56:08 +00:00
Siebrand Mazeland b274606879 Update code formatting, run stylize.php, whitespace updates 2010-02-13 14:10:36 +00:00
Jack Phoenix e2a16fe755 AbuseFilter: big commit - coding style & spacing cleanup; also marked SpecialPages' construct() and execute() functions as public and capitalized some SQL keywords 2009-10-07 13:57:06 +00:00
Roan Kattouw 20b69b8fd6 Followup to r49449: another typo 2009-04-14 08:58:49 +00:00
Chad Horohoe fa22f51e24 (bug 18451) Typos in docs 2009-04-13 21:52:31 +00:00
Roan Kattouw 09f3306a2d AbuseFilter API modules:
* Use the 'new' way of adding results (adding them one at a time and stopping when addValue() returns false)
* Use intval() on results that are really integers
* Use an implicit join in ApiAbuseLog
* Use dieUsageMsg() for an invalid title
* Move some things up and down in ApiAbuseLog so related things are grouped together
2009-03-30 12:19:41 +00:00
Alex Z. 16f22a498e (bug 18063) Add API module to list filter information. 2009-03-29 04:23:20 +00:00