Media Wiki:MediaWiki 1.5.4
From IpbWiki
December 21, 2005
MediaWiki 1.5.4 is a security and bugfix maintenance release.
A hardcoded internal placeholder string has been replaced with a random one. This closes a hole where security checks in inline style attributes could be bypassed, injecting JavaScript code that could execute in Microsoft Internet Explorer.
Other browsers would not be vulnerable.
Several minor fixes are included in this release, most notably a fix to clear the "you have new messages" flag properly for usernames containing spaces when e-mail notification is enabled.
Changes
- (bug 3805) Clear 'new messages' flag properly in enotif mode for usernames containing spaces
- (bug 2714) Backlink from special:whatlinkshere was hard set as 'existing'
- (bug 4249) Typo in entities2literals.pl
- (bug 4233) Update for japanese language
- (bug 4279) Small correction to LanguageDa.php
- (bug 4267) Switch dv sd ug ks arc languages to RTL
- (bug 3991) Allow the operation of wikicode on Protect move only text
- Added AutoAuthenticate hook for external User object suppliers
- Parser internal placeholder string now fully randomized for safety