Commit graph

1345 commits

Author SHA1 Message Date
Roan Kattouw 69381c912e API: Make output containing private or user-specific data uncacheable for logged-in users by setting Vary: Cookie or Cache-Control: private, whichever is appropriate. Fixes instances in core and WMF-deployed extensions only. Without this change, the output of requests like ?action=query&list=recentchanges&rcprop=patrolled&smaxage=3600 would be cached in Squid and viewable for anyone using the same URL, even if they don't have patrol rights. Other, more serious exploits are also possible. Also avoid using $wgUser in one place, kill some unused global $wgUser; instances and tweak a comment. 2010-07-14 19:00:54 +00:00
Raimond Spekking 1560938ccb Localisation updates for core and extension messages from translatewiki.net (2010-07-13 18:48:00 UTC) 2010-07-13 19:10:15 +00:00
Raimond Spekking 5be574a532 Localisation updates for core and extension messages from translatewiki.net (2010-07-11 14:47:00 UTC) 2010-07-11 15:10:37 +00:00
Raimond Spekking 32c1dee769 Localisation updates for core and extension messages from translatewiki.net (2010-07-10 15:00:00 UTC) 2010-07-10 15:33:41 +00:00
Raimond Spekking 66384f81d2 Localisation updates for core and extension messages from translatewiki.net (2010-07-09 15:17:00 UTC) 2010-07-09 15:54:33 +00:00
Chad Horohoe 618c428230 Pass a title to the DifferenceEngine constructor. May not be optional forever ;) 2010-07-09 14:11:07 +00:00
Raimond Spekking 07a5fe799e Localisation updates for core and extension messages from translatewiki.net (2010-07-05 21:20:00 UTC) 2010-07-05 21:51:11 +00:00
Raimond Spekking a5e8f1db58 Localisation updates for core and extension messages from translatewiki.net (2010-07-04 18:27:00 UTC) 2010-07-04 18:55:14 +00:00
Raimond Spekking e89b063c9b Localisation updates for core and extension messages from translatewiki.net (2010-07-03 18:40:00 UTC) 2010-07-03 19:15:49 +00:00
Raimond Spekking 91a241bf4b Localisation updates for core and extension messages from translatewiki.net (2010-07-02 19:08:00 UTC) 2010-07-02 19:30:05 +00:00
Raimond Spekking 18c650869c Localisation updates for core and extension messages from translatewiki.net (2010-07-01 19:25:00 UTC) 2010-07-01 19:37:00 +00:00
Raimond Spekking 25b4f8e88f Localisation updates for core and extension messages from translatewiki.net (2010-06-30 17:45:00 UTC) 2010-06-30 18:02:40 +00:00
Raimond Spekking 0bc2564000 Localisation updates for core and extension messages from translatewiki.net (2010-06-29 19:28:00 UTC) 2010-06-29 19:51:55 +00:00
Andrew Garrett c7f1b42b9e Fix bug 24167 2010-06-28 20:10:09 +00:00
Raimond Spekking 3e10446ba6 Localisation updates for core and extension messages from translatewiki.net (2010-06-28 19:36:00 UTC) 2010-06-28 19:46:38 +00:00
Raimond Spekking 5e8c39255b Localisation updates for core and extension messages from translatewiki.net (2010-06-27 18:45:00 UTC) 2010-06-27 18:58:30 +00:00
Raimond Spekking 23b2f711e6 Follow-up r68534: Add new db patch to onLoadExtensionSchemaUpdates so that it runs with update.php 2010-06-27 15:44:18 +00:00
Raimond Spekking bf1ed9d0e8 Localisation updates for core and extension messages from translatewiki.net (2010-06-2+ 21:25:00 UTC) 2010-06-26 21:40:08 +00:00
Siebrand Mazeland 82476e267c * use standard "Reason:" label
* remove line break in sentence
2010-06-25 22:51:31 +00:00
Andrew Garrett fe39e38282 AbuseFilter: Introduce hiding of abuse log entries, controlled by abusefilter-hidden-log and abusefilter-hide-log rights. 2010-06-25 20:04:55 +00:00
Raimond Spekking 330e183b47 Localisation updates for core and extension messages from translatewiki.net (2010-06-25 18:25:00 UTC) 2010-06-25 18:39:41 +00:00
Alexandre Emsenhuber 5b1fe722e5 svn:eol-style native 2010-06-25 16:53:22 +00:00
Andrew Garrett bd6ab24e2c AbuseFilter: Fix mSearchUser on abuse log. 2010-06-25 00:06:07 +00:00
Raimond Spekking ff9aec17bf Localisation updates for core and extension messages from translatewiki.net (2010-06-24 20:00:00 UTC) 2010-06-24 20:23:20 +00:00
Raimond Spekking 4226ccf51c Localisation updates for core and extension messages from translatewiki.net (2010-06-23 19:10:00 UTC) 2010-06-23 19:23:47 +00:00
Raimond Spekking 894c4ef828 Localisation updates for core and extension messages from translatewiki.net (2010-06-22 19:30:00 UTC) 2010-06-22 20:07:49 +00:00
Raimond Spekking 1f13ffba4c Localisation updates for core and extension messages from translatewiki.net (2010-06-21 19:25:00 UTC) 2010-06-21 19:42:03 +00:00
Sam Reed 42e226f39d Correct the address of the FSF in extension GPL headers
59 Temple Place -> 51 Franklin Street
2010-06-21 13:45:17 +00:00
Raimond Spekking e93715617f Localisation updates for core and extension messages from translatewiki.net (2010-06-20 18:40:00 UTC) 2010-06-20 18:58:27 +00:00
Raimond Spekking de2bb3da17 Localisation updates for core and extension messages from translatewiki.net (2010-06-17 18:50:00 UTC) 2010-06-17 19:11:20 +00:00
Raimond Spekking 2a408fa077 Localisation updates for core and extension messages from translatewiki.net (2010-06-16 19:30:00 UTC) 2010-06-16 19:38:46 +00:00
Chad Horohoe 3979d0c5db Fix a bunch of mime-type and eol-style props 2010-06-14 14:28:07 +00:00
Raimond Spekking 515df85a7c Localisation updates for core and extension messages from translatewiki.net (2010-06-13 18:30:00 UTC) 2010-06-13 19:21:26 +00:00
Raimond Spekking b62f95f0ee Localisation updates for core and extension messages from translatewiki.net (2010-06-12 19:15:00 UTC) 2010-06-12 19:31:27 +00:00
Raimond Spekking 0401463660 Localisation updates for core and extension messages from translatewiki.net (2010-06-11 21:05:00 UTC) 2010-06-11 21:23:59 +00:00
Raimond Spekking fe17f8f65f Localisation updates for core and extension messages from translatewiki.net (2010-06-10 18:40:00 UTC) 2010-06-10 19:00:46 +00:00
Raimond Spekking e24d72c786 Localisation updates for core and extension messages from translatewiki.net (2010-06-09 18:50:00 UTC) 2010-06-09 19:22:07 +00:00
Raimond Spekking c37e00c97c Localisation updates for core and extension messages from translatewiki.net (2010-06-06 18:30:00 UTC) 2010-06-06 18:49:24 +00:00
Siebrand Mazeland df6983e7c4 Localisation updates for extension messages from translatewiki.net (2010-06-05 21:01 UTC) 2010-06-05 21:10:36 +00:00
Siebrand Mazeland 184b610819 Localisation updates for extension messages from translatewiki.net (2010-06-03 22:59 UTC) 2010-06-03 23:19:03 +00:00
Raimond Spekking a2ea0e0ccf Localisation updates for core and extension messages from translatewiki.net (2010-06-02 18:50:00 UTC) 2010-06-02 19:22:28 +00:00
Raimond Spekking 25033f4fb3 Localisation updates for core and extension messages from translatewiki.net (2010-06-01 18:25:00 UTC) 2010-06-01 18:33:40 +00:00
Siebrand Mazeland 987b0158ad Localisation updates for extension messages from translatewiki.net
* full export for all supported extensions.
2010-05-31 15:02:26 +00:00
Raimond Spekking cda9709740 Localisation updates for core and extension messages from translatewiki.net (2010-05-30 18:55:00 UTC) 2010-05-30 19:41:13 +00:00
Aryeh Gregor ed5b83e6ac Remove most named character references from output
Recommit of r66254 to trunk.  This was just

find extensions phase3 -iname '*.php' \! -iname '*.i18n.php' \! -iname 'Messages*.php' \! -iname '*_Messages.php' -exec sed -i 's/ /\ /g;s/—/―/g;s/•/•/g;s/á/á/g;s/´/´/g;s/à/à/g;s/α/α/g;s/ä/ä/g;s/ç/ç/g;s/©/©/g;s/↓/↓/g;s/°/°/g;s/é/é/g;s/ê/ê/g;s/ë/ë/g;s/è/è/g;s/€/€/g;s/↔//g;s/…/…/g;s/í/í/g;s/ì/ì/g;s/←/←/g;s/“/“/g;s/·/·/g;s/−/−/g;s/–/–/g;s/ó/ó/g;s/ô/ô/g;s/œ/œ/g;s/ò/ò/g;s/õ/õ/g;s/ö/ö/g;s/£/£/g;s/′/′/g;s/″/″/g;s/»/»/g;s/→/→/g;s/”/”/g;s/Σ/Σ/g;s/×/×/g;s/ú/ú/g;s/↑/↑/g;s/ü/ü/g;s/¥/¥/g' {} +

followed by reading over every single line of the resulting diff and
fixing a whole bunch of false positives.  The reason for this change is
given in <http://lists.wikimedia.org/pipermail/wikitech-l/2010-April/047617.html>.
I cleared it with Tim and Brion on IRC before committing.  It might
cause a few problems, but I tried to be careful; please report any
issues.

I skipped all messages files.  I plan to make a follow-up commit that
alters wfMsgExt() with 'escapenoentities' to sanitize all the entities.
That way, the only messages that will be problems will be ones that
output raw HTML, and we want to get rid of those anyway.

This should get rid of all named entities everywhere except messages.  I
skipped a few things like &nbsp that I noticed in manual inspection,
because they weren't well-formed XML anyway.

Also, to everyone who uses non-breaking spaces when they could use a
normal space, or nothing at all, or CSS padding: I still hate you.  Die.
2010-05-30 17:33:59 +00:00
Raimond Spekking bf46a750a0 Localisation updates for core and extension messages from translatewiki.net (2010-05-29 18:50:00 UTC) 2010-05-29 19:17:19 +00:00
Raimond Spekking 0f40f0ee36 Localisation updates for core and extension messages from translatewiki.net (2010-05-28 22:20:00 UTC) 2010-05-28 22:42:59 +00:00
Raimond Spekking 2cadf6b2d7 Localisation updates for core and extension messages from translatewiki.net (2010-05-27 18:00:00 UTC) 2010-05-27 18:11:47 +00:00
Chad Horohoe 5fce797b18 Revert r66934 (Removing wfLoadExtensionMessages() from everything). I disagree on principle...we branch extensions for this very reason. But people want trunk extensions compatible for several versions back, meh. 2010-05-27 15:56:53 +00:00
Chad Horohoe 3283b90f01 Large commit. Removed 800+ references to no-op wfLoadExtensionMessages() 2010-05-26 22:25:32 +00:00